I have to enable IMAP service on my CAS server because some colleagues want to use their mobile device that are not compatible with ActiveSync (BlackBerry). Software like AstraSync and others are not so flexible so I would go for IMAP service. In this way, they can aggregate mailbox with main one and download all on BlackBerry via its native function. For now, I have a public IP address that is translated to an internal one, on which there is Exchange 2007 CAS (connected via network with another Ex 2007 with main Role) and it serves activesync devices of the organization. To do this I have permitted ONLY https traffic on the firewall from Internet to the CAS server. I have little confusion on the architecture to achieve this result, I did the followings: On CAS server: 1) I started IMAP service. 2) Renewed and enabled the certificate to use with POP,IMAP,IIS that was invalid. On firewall: 1) I permitted 993 port to CAS Server (IMAP over SSL) I configured a test mail client using a NON-Administrator account and it works syncing folders and receiving the emails. UPDATE: It works only on an internal network, but when I try to add a POP3 account on another webmail service (externally), it doesn't work. On a Gmail test, it does NOT return any error but it doesn't fetch mails. However, I don't understand which SMTP server I have to use, while configuring email client. If I use CAS server, it does not work. I think because it has no SMTP service inside .. however I have the main ex 2007 server that has it ... but it is located on an internal network and it is unreachable from a public ip address... how can I do ? Or perhaps ... could I configure main role to do this and use CAS as a "bridge" ? Any help appreciated. Best regards.

Veering wildly off topic here - I suggest you not use IMAP for Blackberries. Get BES. If you can't do that (and seriously, if you have BBs you should...), then have each BB user configure Blackberry Internet Service mail on their wireless provider's website. This essentially acts as a proxy for OWA.Lanwench [MVP - Exchange] ** Do not fold, spindle or mutilate. Fill in the box completely and erase any stray marks. Use only a #2 pencil.

So you have 993 open which is IMAP but then you say you're trying to POP the mail. These are seperate services and ports...Active Directory, 4th Edition - www.briandesmond.com/ad4/