Hello everyone,
I have an UAG 2010 SP4 which is being accessed with https://portal.domain.org. OWA 2013 and the SharePoint 2013 site sp.domain.org are published applications and they are working as expected. Additionally I have configured successfully a SiteMailbox under the this SP Site , which is working internally as expected - via Outlook and via OWA.
I will explain the steps how I am opening the site mailbox externally:
1. Access the external portal - portal.domain.org
2. Click on the published SP application site, which is responsible for the site mailbox
3. When you click on the "Mailbox" under "Recent" and you are being redirected to OWA . https://portal.domain.org/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fportal.domain.org%2fowa%2fSM-SiteMailbox%40domain.loc%2f
4.When you put your credentials you are being redirected again to /owa/SM-SiteMailbox@domain.loc/#path=/mail and you access the site mailbox successfully.
My problem is on step 4. When you are trying to open the site mailbox externally UAG is not allowing to access this path, the error is:
'You have attempted to access a restricted URL. The URL contains an invalid path" and it hangs on
https://portal.domain.org/owa/SM-SiteMailbox@domain.loc/auth/errorfe.aspx?owaError=ClientError;exMsg%3dSyntax error;file%3dhttps://portal.domain.org/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/scripts/preboot.js:2&owaVer=15.0.847.32&be=null&ts=1409654204085
I have already set some URL Sets in UAG like /owa/SM-SiteMailbox@domain.loc/#path=/mail, /owa.* and /owa but this didn't help. At this point I am not sure if I put the correct urls and if this is enough at all.
I am posting the result from the WEB Monitor and I hope someone can help to understand what is going on.
Thanks!
------------
A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/sessiondata.ashx?appcache=false contains an illegal path. The rule applied is Default rule. The method is POST.
Warning 09/02/2014 14:39:14 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/scripts/boot.1.mouse.js contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:14 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/plt1.ashx?cId=a1752be9-dcf0-47d3-9bed-a9b71d6cb1bb&msg=ClientError&tg=&MDB=8cfe83c8-66d8-4796-9746-9a95d01a2fc0&sdCoId=a1752be9-dcf0-47d3-9bed-a9b71d6cb1bb_1409657954460&fe=null&be=null&cbe=null&cver=15.0.847.32&rand=1409657954491&rpo=0&off=0&pal=0&rfe=0&PLT=nowNoTim,31&lbv=undefined&icv=undefined&iacr=undefined&lcver=15.0.847.32
contains an illegal path. The rule applied is Default rule. The method is POST.
Warning 09/02/2014 14:39:14 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/auth/errorfe.aspx?owaError=ClientError;exMsg%3dSyntax%20error;file%3dhttps://portal.domain.org/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/scripts/preboot.js:2&owaVer=15.0.847.32&be=null&ts=1409657954491
contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:13 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/sessiondata.ashx?appcache=false contains an illegal path. The rule applied is Default rule. The method is POST.
Warning 09/02/2014 14:39:13 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/scripts/boot.1.mouse.js contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:13 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/resources/styles/segoeui-semibold.eot? contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:13 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/plt1.ashx?cId=a1752be9-dcf0-47d3-9bed-a9b71d6cb1bb&msg=ClientError&tg=&MDB=8cfe83c8-66d8-4796-9746-9a95d01a2fc0&sdCoId=a1752be9-dcf0-47d3-9bed-a9b71d6cb1bb_1409657953069&fe=null&be=null&cbe=null&cver=15.0.847.32&rand=1409657953116&rpo=0&off=0&pal=0&rfe=0&PLT=nowNoTim,47&lbv=undefined&icv=undefined&iacr=undefined&lcver=15.0.847.32
contains an illegal path. The rule applied is Default rule. The method is POST.
Warning 09/02/2014 14:39:13 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/resources/styles/segoeui-semilight.eot? contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:13 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/auth/errorfe.aspx?owaError=ClientError;exMsg%3dSyntax%20error;file%3dhttps://portal.domain.org/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/scripts/preboot.js:2&owaVer=15.0.847.32&be=null&ts=1409657953116
contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:08 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/sessiondata.ashx?appcache=false contains an illegal path. The rule applied is Default rule. The method is POST.
Warning 09/02/2014 14:39:08 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/scripts/preboot.js contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:08 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/scripts/boot.0.mouse.js contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:08 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/scripts/boot.1.mouse.js contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:08 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/resources/styles/segoeui-regular.eot? contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:08 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/plt1.ashx?cId=a1752be9-dcf0-47d3-9bed-a9b71d6cb1bb&msg=ClientError&tg=&MDB=8cfe83c8-66d8-4796-9746-9a95d01a2fc0&sdCoId=a1752be9-dcf0-47d3-9bed-a9b71d6cb1bb_1409657948007&fe=&be=&cbe=&cver=15.0.847.32&rand=1409657948257&rpo=0&off=0&pal=0&rfe=0&PLT=nowNoTim,250&lbv=undefined&icv=undefined&iacr=undefined&lcver=15.0.847.32
contains an illegal path. The rule applied is Default rule. The method is POST.
Warning 09/02/2014 14:39:08 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/auth/errorfe.aspx?owaError=ClientError;exMsg%3dSyntax%20error;file%3dhttps://portal.domain.org/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/scripts/preboot.js:2&owaVer=15.0.847.32&be=null&ts=1409657948257
contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:08 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/resources/styles/segoeui-semibold.eot? contains an illegal path. The rule applied is Default rule. The method is GET.
Warning 09/02/2014 14:39:08 67 URL Path Not Allowed Security portal (S) UAG A request from source IP address 192.168.1.1, user administrator on trunk portal; Secure=1 for application OWA of type ExchangePub2013 failed. The URL/owa/SM-SiteMailbox@domain.loc/prem/15.0.847.32/resources/styles/segoeui-semilight.eot? contains an illegal path. The rule applied is Default rule. The method is GET.