How to Configure SSL Offloading for Outlook Anywhere

Microsoft Exchange Server 2007 will reach end of support on April 11, 2017. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.


Applies to: Exchange Server 2007, Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3

Topic Last Modified: 2007-08-27

This topic explains how to use the Exchange Management Console and the Exchange Management Shell to configure Secure Sockets Layer (SSL) encryption offloading for Outlook Anywhere.

The first time that you run the Enable Outlook Anywhere Wizard, you can enable SSL offloading by selecting the check box next to Allow secure channel (SSL) offloading. However, if you want to enable SSL offloading and you have already run the Enable Outlook Anywhere Wizard without selecting this option, you can use the Exchange Management Shell and the Set-OutlookAnywhere cmdlet to set up SSL offloading.

To perform this procedure, the account you use must be delegated the Exchange Server Administrator role and membership in the local Administrators group for the target server.

For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.

  1. In the Exchange Management Console tree, expand Server Configuration, and then click Client Access.

  2. In the action pane, click Enable Outlook Anywhere.

  3. In the Enable Outlook Anywhere Wizard, in the box under External host name, type the external host name for your organization.

  4. Select an available external authentication method. You can select Basic authentication or NTLM authentication.

  5. If you are using an SSL accelerator and you want to do SSL offloading, select the check box next to Allow secure channel (SSL) offloading.

    Do not use this option unless you are sure that you have an SSL accelerator that can handle SSL offloading. If you do not have an SSL accelerator that can handle SSL offloading and you select this option, Outlook Anywhere will not function correctly.
  6. Click Enable to apply these settings and enable Outlook Anywhere.

  7. Click Finish to close the Enable Outlook Anywhere Wizard.

  1. Run the following command:

    Set-OutlookAnywhere -Name Server01 -SSLOffloading $true

For more information about syntax and parameters, see Set-OutlookAnywhere.

For more information about how to configure security for Outlook Anywhere, see Managing Outlook Anywhere Security.