Hi,
We running exchange 2010 CAS and Mailbox Servers
We have three receive connectors defined on the CAS Server Hub Transport, one of which is for anonymous relay (from our SPAM Filter) where we have TLS mutual auth configured for that connector. For well over a year all connections from the spam appliance to the CAS have been encrypted. Then about a month ago, the connections all of a sudden are no longer encrypted. The certificate associated with this connector is still valid.
My interpretation of the EHLO output seems to suggest that that TLS is not supported, but why?
220 exchcas1.gfa.org Microsoft ESMTP MAIL Service ready at Wed, 7 Nov 2012 11:52:53 -0600
ehlo
250-exchcas1.gfa.org Hello [10.200.0.98]
250-SIZE 10485760
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-AUTH
250-8BITMIME
250-BINARYMIME
250 CHUNKING
We have a send connector with TLS option configured (different certificate) and that's working fine.
I'm curious if anyone has seen this and where else I should be looking to troubleshoot/resolve the problem?
Thanks!