question

Test-6830 avatar image
0 Votes"
Test-6830 asked ·

Skype for business 2015 + INternal serverare published + Mcxservices

Hello,

I have some security issues regarding my skype for bsuiness 2015 configuration
.
Our internal servers are published instead of external servers in the link below:

https://meeting.contoso.com/Mcx/McxService.svc/mex

Any idea how can i solve this

not-supported
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered ·

Skype for business is not supported here on QnA. I'd try asking for help in dedicated forums here.

https://social.technet.microsoft.com/Forums/en-US/home?forum=sfbfr


--please don't forget to Accept as answer if the reply is helpful--


Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows Server] Datacenter Management


Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.




·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

lucavitali avatar image
0 Votes"
lucavitali answered ·

Hi,
if your SfB 2015 Front-End Servers are published through a Reverse Proxy, this is the correct deployment and this URL is correct to be reachable from Internet.
If your Front-End are directly exposed to Internet via NAT, in that case you have a security issue.

That's said, I suggest to start to move your SfB users to Teams as soon as possible.
Best.
Luca

· 1 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks,
So its normal that my internal server is shown in the url

Our internal server name : skycom-sfb.crb:4443
When we go to the url :https://meeting.contoso.com/Mcx/McxService.svc/mex

We can see that the internal server is listed:

<xsd:schema targetNamespace="http://tempuri.org/Imports">;
<xsd:import schemaLocation="https://skycom-sfb.crb:4443/WebTicket/WebTicketService.svc/mex?xsd=xsd0" namespace="http://schemas.microsoft.com/Message"/>;

0 Votes 0 ·