iphone + exchange server, what ports?

[vivithemage]

What ports should we configure in our ISA? Whhen we open up all ports on the ISA, everything works great, battery life is amazing.

When we start locking it down, and only allow 443, and a few other ports, battery life is drained at about 8% per hour, so we think the iphone's trying to connect to another port, just not sure what.

Anyone know what ports they have open on their routers/ISA?

 

[Interpolation]

443 is the only port I have open on my firewall and it works fine.

But I have my iphone going via the external ip address for both wifi and 3G.

 

[vivithemage]

This is when our phone is on 3G, not on wifi or anything.

It's gotta be connecting on another port, we just don't know what. Anyone do this with an ISA?

 

[Flhusky]

How are your clients accessing their exchange accts? pop3? imap? smtp? web only?
What type of authentication are you requiring of the clients?

POP3 - port 110
IMAP - port 143
SMTP - port 25
HTTP - port 80
Secure SMTP (SSMTP) - port 465
Secure IMAP (IMAP4-SSL) - port 585
IMAP4 over SSL (IMAPS) - port 993
Secure POP3 (SSL-POP) - port 995

Did you read s docs? Sounds like you may have.
Did you check out some the information at: iPhone exchange

 

[vivithemage]

Nice husky, i've got one too .

But, we are using activesync on the iphone.

 

[RandomKamikaze]

It will only be using port 443.

If you want to check simply enable logging on your ISA, filter for your iPhone's public IP address and see what it is doing.

 

[vivithemage]

Yeah, everything I read is port 443, nothing else.

But can anyone explain to me, before I do the logging, why the battery drains so quickly when we lock down and only allow 443? And when we open up the ISA, it's happy as can be, and we get great battery life.

 

[RandomKamikaze]

How long did you conduct your tests over?

Was the phone usage the same every time?

Where the conditions similar every time?

 

[vivithemage]

How long did you conduct your tests over?

Was the phone usage the same every time?

Where the conditions similar every time?

Yes, we've tried a few phones as well. We have been testing for about a week now.

If we open up the firewall, battery drain is normal, nothing huge. Once we lock it down, and only allow specified ports, it drains the batteries quick.

 

[RandomKamikaze]

I can only suggest that you do some logging on your firewall to find out if the iPhone is hitting it on any other ports. It shouldn't be though.

What other services are you using on your iPhones?

 

[vivithemage]

I can only suggest that you do some logging on your firewall to find out if the iPhone is hitting it on any other ports. It shouldn't be though.

What other services are you using on your iPhones?

Nothing notable. But every time we tested, they all had the same configurations.