No, a trihomed host in your DMZ is rarely a good option for anything. Set the ISA box up in just the DMZ, and write your firewall rules to allow inbound connections from the internet to the ISA box on port 443 (https) only, and then from the ISA box to your front end servers on the internal network.
------------------------------------------------------ Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -----Original Message----- > From: Pillai, Raj [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, February 05, 2003 4:49 PM > To: Exchange Discussions > Subject: RE: Front end Server > > > > OK, > > Any one using an ISA Server in the DMZ connecting to an > Exchange Server > through the firewall? > I have been looking at some technet articles about a "trihomed ISA > Server in the Perimeter network". Is this a better option? > > Thanks for all the ideas. > > Raj > > -----Original Message----- > From: Charles Marriott [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, February 05, 2003 12:36 PM > To: Exchange Discussions > Subject: RE: Front end Server > > > If security is your goal use an ISA Server. FE Exchange > Servers are not > security devices, contrary to what you may have been told. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Pillai, Raj > Sent: Wednesday, February 05, 2003 11:05 AM > To: Exchange Discussions > Subject: RE: Front end Server > > > > To keep the BE server secure ( do not want to open the OWA ports to > users who are not using VPN and dialup). Also we have a document > management software (imanage) which could be integrated to Outlook. > Since the users access the Imanage web portal via the web, > they could > access their email also via owa (secured with SSL). > Any other suggestions would be welcome. > > Thanks > > -----Original Message----- > From: Charles Marriott [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, February 05, 2003 11:49 AM > To: Exchange Discussions > Subject: RE: Front end Server > > > Why do you think you need a FE server? > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Pillai, Raj > Sent: Wednesday, February 05, 2003 10:45 AM > To: Exchange Discussions > Subject: RE: Front end Server > > > > One Exchange Server, 200 mailboxes > > -----Original Message----- > From: Charles Marriott [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, February 05, 2003 11:45 AM > To: Exchange Discussions > Subject: RE: Front end Server > > > How many Exchange Servers, protocols and mailboxes will this FE Server > be > load balancing? > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Pillai, Raj > Sent: Wednesday, February 05, 2003 10:20 AM > To: Exchange Discussions > Subject: Front end Server > > > > Dear All, > > I am in the process of building a Front End server(Exchange 2000 > enterprise sp3, to be placed in the DMZ, just for OWA. An IBM > workstation class machine with Pentium 4, 1.80GHz CPU with a > 36GB HDD is > being used for this purpose. I am not expecting more that 20-25 > concurrent connections to this box at any given time. > Will this box be able to handle this load or do I need a > "Server class" > machine? > > Exchange 2000 enterprise sp3, windows 2000 server sp > > As always I appreciate all your input. > > Raj > > ************************************************************** > ********** > **** > ** > This e-mail message, including any attachments, contains information > that is > confidential, may be protected by the attorney/client or other > applicable > privileges, and may constitute non-public information. This > message is > intended to be conveyed only to the designated recipient(s). > If you are > not > the intended recipient of this message, do not read it; please > immediately > notify the sender that you have received this message in error and > delete > this > message.Unauthorized use, disclosure, dissemination, distribution, > reproduction > of this message or the information contained in this message or the > taking > of > any action in reliance on it is strictly prohibited and may > be unlawful. > Thank you for your cooperation. > ************************************************************** > ********** > **** > ** > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > ************************************************************** > ********** > **** > ** > This e-mail message, including any attachments, contains information > that is > confidential, may be protected by the attorney/client or other > applicable > privileges, and may constitute non-public information. This > message is > intended to be conveyed only to the designated recipient(s). > If you are > not > the intended recipient of this message, do not read it; please > immediately > notify the sender that you have received this message in error and > delete > this > message.Unauthorized use, disclosure, dissemination, distribution, > reproduction > of this message or the information contained in this message or the > taking > of > any action in reliance on it is strictly prohibited and may > be unlawful. > Thank you for your cooperation. > ************************************************************** > ********** > **** > ** > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > ************************************************************** > ********** > **** > ** > This e-mail message, including any attachments, contains information > that is > confidential, may be protected by the attorney/client or other > applicable > privileges, and may constitute non-public information. This > message is > intended to be conveyed only to the designated recipient(s). > If you are > not > the intended recipient of this message, do not read it; please > immediately > notify the sender that you have received this message in error and > delete > this > message.Unauthorized use, disclosure, dissemination, distribution, > reproduction > of this message or the information contained in this message or the > taking > of > any action in reliance on it is strictly prohibited and may > be unlawful. > Thank you for your cooperation. > ************************************************************** > ********** > **** > ** > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > ************************************************************** > **************** > This e-mail message, including any attachments, contains > information that is > confidential, may be protected by the attorney/client or > other applicable > privileges, and may constitute non-public information. This > message is > intended to be conveyed only to the designated recipient(s). > If you are not > the intended recipient of this message, do not read it; > please immediately > notify the sender that you have received this message in > error and delete this > message.Unauthorized use, disclosure, dissemination, > distribution, reproduction > of this message or the information contained in this message > or the taking of > any action in reliance on it is strictly prohibited and may > be unlawful. > Thank you for your cooperation. > ************************************************************** > **************** > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
