Zimbra behind Microsoft ISA 2006

[bsutt]

Hi all,

We've recently upgraded from 5.018 to the shiny, new 6.02 Community Edition. The upgrade went pretty smoothly and we have everything up and running on our local network. Before the upgrade we were able to access the Zimbra Web Client via a Microsoft ISA 2006 server acting as a reverse proxy.

Since the upgrade, we have been unable to log in to the web client. When first attempting to log in (after restarting zmmailboxd) the external user gets a message saying cookies are disabled on their browser. Each time they enter their username and password after that and click login, the login screen will refresh and prompt them to enter their login details again. If I switch the interface to HTML (Standard) I get an error message saying 'Authentication Required'.

I've trawled through the logs and cannot really find anything useful - I've included the Jetty log below for a request that failed ... any suggestions? Is anybody running the latest version of Zimbra in this configuration? Any ideas will be gratefully received!

14:23:55.576:btpool0-12://mail.domain.com/zimbra/ 10.81.225.117 POST ZM_TEST=true; ZM_TEST=true; ZM_AUTH_TOKEN=0_a76eb94bf7fb5203e55c4cecf149743b36 1caaed_69643d33363a32396634383364662d366234311d346 163342d386365392d3337376366626364653436623b6578703 d31333a313235363832353037323030353b747970653d363a7 a696d6272613b;; Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
14:23:55.681:btpool0-13://mail.domain.com:8100/service/soap/AuthRequest 10.81.224.20 POST null; zclient 6.0.2_GA_1912.UBUNTU8
14:23:55.686:btpool0-13://mail.domain.com:8100/service/soap/AuthRequest 200 text/javascript; charset=utf-8 1236
14:23:55.687:btpool0-12://mail.domain.com/zimbra/ 302 text/html; charset=utf-8 0/org.mortbay.io.RuntimeIOException: java.io.IOException: Closed
14:23:55.731:btpool0-13://mail.domain.com/zimbra/ 10.81.225.117 GET ZM_TEST=true; ZM_TEST=true; ZM_AUTH_TOKEN=0_d64d518edc40866b2d357e487e6cf7a732 b8d0f0_69643d31163a32396634383364662d366234322d346 163342d386365392d3337376366626364653436623b6578703 d31333a313235363832363233353638343b747970653d363a7 a696d6272613b;; Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
14:23:55.751:btpool0-12://localhost:7071/service/admin/soap/GetDomainInfoRequest 127.0.0.1 POST null; ZCS
14:23:55.754:btpool0-12://localhost:7071/service/admin/soap/GetDomainInfoRequest 200 text/xml; charset=utf-8 437
14:23:55.758:btpool0-13://mail.domain.com/zimbra/ 200 text/html; charset=utf-8 13490

Just to make things more interesting, external access will always work with Safari, but not any other browser I've tried! I'm now completely lost - but I hope that gives a clue to somebody who might be able to help! I understand that Safari support was introduced later - does the web client do things differently to other browsers if it detects a Safari browser string?

Cheers,

Ben.