Integration of unity connection 8.5 with exchange 2007 configuration help

[thejas.ramadas]

Hi,

I am trying to integrate unity connection 8.5 and exchange 2007. I have configured unity connection as per the cisco document. Our exchange server is in a remote site and there is a firewall between our network.

I am having some doubts regarding the integration :-

1. Is it mandatory to allow icmp between exchange and unity connection ?

2. which all are ports should be open between unity connection and exchange for this integration?

Please advice....

Regards,

Thejas

[William Bell]

Thejas,

The Unity Connection security guide lays out all of the ports that are needed between Unity Connection and the Exchange servers.

http://www.cisco.com/en/US/docs/voice_ip_comm/connection/8x/security/guide/8xcucsec010.html

Looks like you need to support:

TCP/7080 : Exchange->CUC

TCP/53 (UDP/53) : CUC -> DNS server (may or may not be relevant to your FW config)

TCP/389 or TCP/636 : CUC -> LDAP/AD DC/GC (hopefully, 636 is used if security is important to you)

TCP/80 or TCP/443 : CUC -> EWS

TCP/143 or TCP/993 : CUC -> Exchange (IMAP service) (prefer 993 for security)

I think you may need to open SMTP as well, though that isn't clearly stated in the document.

How I like to approach configs like this is to use the Cisco docs to setup a a FW filter and then either:

a. allow all other ports through with appropriate logging enabled.  OR

b. block all other ports with appropriate logging enabled

The idea is, you apply the hypothesis and test the hypothesis. Then tweak as needed based on what you see in the logs.

HTH.

Regards,

Bill

[David Hailey]

To add to Bill's reply (+5), you'll want to open up SMTP for mail relay (Smart Host) functionality.

Hailey

Please rate helpful posts!

[William Bell]

Good catch.