Traveler Setup w/ISA firewall

HCL Domino Domino Forum
1

We’re trying to get traveler up and running and are having some problems getting it to work.

We’ve gotten to the point that the phone client will install and accept the credentials, but it fails to complete the initial sync. The error message on the phone and the log from the device is below, any ideas?

Message on the phone:

Connection error with server xyz.company.com port 80. Initial sync is not complete. No IP address is available.

Log from the phone (with some duplicate entries removed)

Build: 8.5.0.1 200812161401

Device ID: 7DB04DC4A8BF15F295BDDFAD4407554B9F6C2D43

User ID: dennis frank

07:21:20 Today is Wednesday, September 02, 2009.

07:21:20 Settings update successfully uploaded to the server.

07:21:22 Auto Sync is enabled and the power is sufficient, so automated features are enabled.

07:21:24 Connected to server. Device is currently up-to-date.

07:21:26 Syncing with server. Initial sync is not complete.

07:21:27 Sync beginning.

07:21:27 Opening connection to the server.

07:21:28 Logging into the server.

07:21:55 Lotus Traveler server is not available.

07:21:55 Sync Results:

07:21:55 No items were synced.

07:21:56 Error (37): The server reported that it encountered an internal error (500). Initial sync is not complete.

07:22:17 Today is Wednesday, September 02, 2009.

07:22:17 Connected to server. Device is currently up-to-date.

07:22:22 Error (8): Connection error with server traveler.phase2.com port 8642. Initial sync is not complete.

07:27:13 Connected to server. Device is currently up-to-date.

07:27:16 Syncing with server. Initial sync is not complete.

07:27:17 Sync beginning.

07:27:18 Opening connection to the server.

07:27:18 Logging into the server.

07:27:22 Lotus Traveler server is not available.

07:27:22 Sync Results:

07:27:22 No items were synced.

07:27:23 Error (37): The server reported that it encountered an internal error (500). Initial sync is not complete.

07:27:26 Syncing with server. Initial sync is not complete.

07:27:27 Sync beginning.

07:27:28 Opening connection to the server.

07:27:28 Logging into the server.

07:27:31 Lotus Traveler server is not available.

07:27:31 Sync Results:

07:27:31 No items were synced.

…

07:52:07 Error (37): The server reported that it encountered an internal error (500). Initial sync is not complete.

07:54:02 Connected to server. Device is currently up-to-date.

07:54:02 Error (8): Connection error with server traveler.phase2.com port 8642. Initial sync is not complete.

08:00:09 Time out reached while connecting to the network. Please verify that your data network is available and check your network configuration settings.

08:02:10 The client could not open a connection to this address and port.

2

Subject: Traveler and firewall

The Traveler client requires both HTTP Port 80 and TCP port 8642 to function correctly. Please make sure both ports are open to the Traveler server in the firewall. If stil having issues at that point then please open a problem report so we can assist you better.

Thanks for your time.

3

Subject: Thanks

Thanks for the response…at this point I’m fairly certain the firewall doesn’t have those ports opened correctly.

I was able to connect the test phone to our wireless network (thereby bypassing the firewall) and sync successfully. I’ll follow up with our network guys and see if we can resolve it.

4

Subject: Finally got it working

Had to put this on the back burner for a while, but we finally did get this to work and I figured I’d update this in case anyone else had the same problem in the future. The trick (and I imagine not all firewalls would have this issue) was that we had opened port 80 via what ISA calls a web publishing rule. When we changed this to a general port 80 access rule (make sure to check that no other web traffic will be coming in on that external IP address), Traveler synced just fine.

5

Subject: Can you explain bit more

Thank you for the solution update, we have somewhat similar situation with our ISA 2006. We have web publishing rule opening port 80 to the traveler server and also server publishing rule opening 8642 to the traveler server which is 8.5.1. I have issue with windows mobile clients where initial sync fails, however with same setup Symbian client 8.5.0 works fine but new client 8.5.1 fails as well. Surprisingly,iPhone have no issue, can explain your solution a bit in detail. Thank you

Log type: Web Proxy (Reverse)

Status: 50 The request is not supported.

Rule: xxx.xxxx.com

Source: External (178.53.209.118)

Destination: (10.128.10.56:80)

Request: POST http://10.128.10.56/servlet/traveler?action=sync&orig=dp&deviceId=E9EA1F9E7C5F59C6091811C27D86D543E2BFFC1B

Filter information: Req ID: 0c365243

Protocol: http

User: anonymous