Voicemail to Email issues

[cholzhauer]

I tightened the security screws on my Exchange server over the weekend and users are unable to get voicemails in their email.  I turned of SSLv3, as well as some lower security ciphers.  TLS1.0/1.1/1.2 are enabled.  I am using port 587 to send mail to Exchange.

I've looked at the mail.mainlog , but it hasn't been changed since 11/8 and is empty.

I'm on version 6.0.11.119

EDIT:

Probably helps if I look at the correct log:

Code: [Select]

[11037 11-17-2015  9:04:51 ]*UM* IMAP INFO: Trying IP address [192.168.18.214]
[11038 11-17-2015  9:04:51 ]*UM* IMAP WARNING: SSL Connection failed, attemting TCP
[11039 11-17-2015  9:04:51 ]*UM* IMAP INFO: Trying IP address [192.168.18.214]
[11040 11-17-2015  9:04:51 ]*UM* IMAP ERROR: Connection failed to amos.sscorp.com,143: Connection refused
[11041 11-17-2015  9:04:51 ]*UM* IMAP ERROR: Connect failed; TCP Connection Failed
[11042 11-17-2015  9:04:51 ]*UM* 1556: FAILED to connect to IMAP Server
[11043 11-17-2015  9:04:51 ]*UM* IMAP ERROR: [CLOSED] IMAP connection broken (command)
[11044 11-17-2015  9:04:51 ]*UM* 1556: Restarting Main Thread
[11045 11-17-2015  9:04:51 ]*UM* 1556: Entering Main Account Thread Loop
[11046 11-17-2015  9:04:51 ]*UM* 1556: The previous connection attempt failed, waiting for 30 minutes.


[Tech Electronics]

Cholzhauer,

It looks as though you have setup Enhanced Integration instead of Forward and Copy as it is trying to use IMAP to connect to your Exchange Server. If this is not new then try looking at these.

1. Please confirm you have enabled IMAP
       http://technet.microsoft.com/en-us/library/bb124489.aspx

2. You should confirm that your server works well. You can set up outlook 2010 IMAP account to test it.
      You can read this KB about it.
      http://technet.microsoft.com/en-us/exchangelabshelp/gg312147.aspx

Thanks,

TE

[cholzhauer]

You are correct; we are using enhanced integration.

I can confirm IMAP works and can confirm that the Exchange service is running.

I suspect if I re-enable SSLv3, things will work, but I'm not going to do that.

What port is normally used here?

[Tech Electronics]

Cholzhauer,

Typically you would want to remove SSL version 3 [Port 465] in favor of TLS [Port 587], but when using Enhanced Integration those settings are not used by the system as it uses IMAP for the Integration instead. Now, since you are using IMAP the ports change a little as IMAP/SSL [Port 993] and IMAP with or without TLS [Port 143; as you saw in your logs].

Your problem is that the system is not able to access your Exchange Server via IMAP so you need to look at the issue there and use the SSH Shell to verify that you can telnet into your Exchange via port 143 for IMAP; just look up how to test IMAP via telnet and you will see.

Thanks,

TE

[cholzhauer]

That put me on the right track, thanks.

There was a component on the Exchange server that wasn't active...once I set that to active, it worked.

https://technet.microsoft.com/en-us/library/jj218699(v=exchg.160).aspx

[jchristman2002]

What was the inactive component?

[cholzhauer]

https://blogs.technet.microsoft.com/exchange/2013/09/26/server-component-states-in-exchange-2013/

Probably something with IMAP