Exchange Server

Igor Dombrovan · Guest

Hi guys

Our organization is considering implementing Exchange and there's one point
I can't resolve.
As far as I understand, to let mobile users access our Exchange server I'll
have to implement an RPC ver HTTPS proxy and let them access our internal
Exchange server which in turn needs access to Active Directory servers. So
placing Exchange in DMZ without any access to LAN is not possible, right ? I
feel uncomfortable with that idea as I'm used to placing mail servers in DMZ
with no access to LAN to be sure if they're broken into only they will
suffer.

Any comments ?

Thanks in advance,
Igor

Paul Ford · Guest

You could put a Microsoft ISA server in the DMZ, its not best practice to
put Exchange in a DMZ as you have to "swiss cheese" (i.e. open lots of
ports) your firewall between internal network and DMZ.

Have a look at
http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3FrontBack/9cc357e9-ca39-49f0-823f-c2f0a316dbd4.mspx
and
http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/febetop.mspx

Regards

Paul Ford
Edge IT Ltd

	Exchange Server Forum Index -> Design	All times are GMT
Page 1 of 1