Instal a certificate on the front-end server and open port 443 to the front-end server. Putting a front-end server in a DMZ requires you to open lots of dangerous ports through the internal firewall to the Exchange servers, DCs and GCs.
Ed --- Erick Thompson <[EMAIL PROTECTED]> wrote: > I'm setting up OWA in my organization, and I have > two choices. I can set up Exchange on the web server > (in the DMZ), and specify it as a front end server, > or I can open port 80 to the primary Exchange > server. From a security standpoint, I really like > the first option, but I'm thinking that I need a > second Exchange Enterprise license. Am I correct in > this? > > Am I being too paranoid about opening port 80 > through to the internal Exchange server? I've never > liked the idea of raw traffic entering my LAN.... > > Thanks, > Erick > > _________________________________________________________________ > List posting FAQ: > http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english > To unsubscribe: > mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
