Originally posted by Whittey:
ISA 2k6 on W2k3. No PC's (using rpc over https or owa) had an issue, and only the older phones (well, and a couple newer ones). That's what was throwing us off. Verisign said it was pretty common, as the intermediate they used for our cert was authorized starting March of this year and they just had us reapply for a new one. Simple fix, but really annoying.
Yeah it can be annoying. Our EAS devices suddenly didn't work when we went to ISA 2006, but all testing was fine. Turns out the ISA admin hadn't installed the new intermediate on the 2006 boxes. Doh. That fixed the EAS devices once I saw it was missing. EAS is kind of weird, it'll basically allow ISA to say "yeah this SSL is ok" if an intermediat is missing on the phone itself.