OWA has been working fine internally and externally for a long time and now it cannot be accessed outside the network. Internally it works fine. We got a new wildcard SSL certificate and tried to use it with OWA and that is when everything broke. We know now that OWA does not like wildcard certs so we got another certificate specifically for OWA. Installed it and external access is still down. Nothing has changed in our DNS settings... What I have done to try and get it working again: I installed a new SSL certificate because the old one was expired. I rebuilt OWA by deleting the 6 virtual directories (exchange, exchweb, oma, microsoft active sync, and public) and the D2SMB from the metabase. I restarted the Exchange System Attendant service to rebuild the directories Tested internally after rebuild and it works like it always has. External test failed. From an external connection I can get to a warning page that displays our usage policy. This page is in the Default Website and has a link that connects to https://exchange.domain.com/exchange. When I click the link I get a "Page cannot be displayed" error. For kicks I removed the 's' from https and refreshed the page and got a message that this site requires SSL. That too tells me that I am getting to the exchange virtual directory under the Default Website. I have tried a myriad of suggestions found in Google groups and nothing has worked yet. In the three years I have worked at this job OWA has broken once and all we did to get it back internally and externally was to rebuild it using the process I described above. Maybe I forgot a step or a setting???
Problem solved. The issue was that our web server has two IP addresses. When looking at the properties of the Default Website the correct IP was displayed but when I clicked the advanced button, next to the IP address, I found that the wrong IP address was set for port 443. Once I changed the IP address everything worked. If you rebuild OWA like I did by restarting the Exchange System Attendant services you need to double check the IP addresses it sets up automatically to make sure they jive with your DNS and firewall.
