Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HealthChecker should validate IIS bindings for "All Unassigned" #2209

Closed
nourdinb opened this issue Oct 22, 2024 · 0 comments · Fixed by #2272
Closed

HealthChecker should validate IIS bindings for "All Unassigned" #2209

nourdinb opened this issue Oct 22, 2024 · 0 comments · Fixed by #2272
Assignees
Labels
Enhancement New feature or request good first issue Good for newcomers Health Checker P2 Triage Needs to be discussed to determine how to handle

Comments

@nourdinb
Copy link
Contributor

Is your request related to a problem? Please describe.
Healthchecker should check if IIS bindings are correctly configured, especially on the backend website.
Binding should be "all unassigned" and not for a specific IP address.

Describe The Request
The correct default values on backend should be like this:
Exchange Back End Started False http - *:81: - NULL
https - *:444: - 69DE5CA602D04D03939DA4E2F5BE2D076609B906
Incorrect setting on backend:
Exchange Back End Started False http - *:81: - NULL
https - 192.168.10.48:444: - 69DE5CA602D04D03939DA4E2F5BE2D076609B906

This becomes important when extended protection is enabled. When it is, and the binding is set to a specific IP address of the server the backend will drop the connection with the well known SEC_E_BAD_BNDINGS error; 2148074310.

Additional context
Checked with Exchange Health Checker version 24.10.15.1910

@dpaulson45 dpaulson45 added Enhancement New feature or request good first issue Good for newcomers Health Checker Triage Needs to be discussed to determine how to handle P2 labels Oct 22, 2024
@dpaulson45 dpaulson45 added this to the HC - Dec 2024 Release milestone Oct 22, 2024
dpaulson45 added a commit that referenced this issue Jan 22, 2025
…Check

Update Invoke-AnalyzerIISInformation.ps1 to verify Exchange Back End website binding [Issue #2209]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Enhancement New feature or request good first issue Good for newcomers Health Checker P2 Triage Needs to be discussed to determine how to handle
Projects
None yet
3 participants