Paul, I note that you say "Exchange Only" BUT for many folks the added advantage of single sign on to other web sites (share point, extra net) can be a big attraction. Are you sure you won't need this in future?
Dave Wade From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: 08 October 2011 18:17 To: MS-Exchange Admin Issues Subject: Using Forefront TMG to protect Exchange 2010? I wondered what peoples thoughts are on using TMG to proxy Exchange 2010 OWA/RPC/ActiveSync access? We already use a firewall that does SSL inspection and only allows access to the Exchange virtual directory URL's so I'm not entirely sure what benefits using TMG (solely for Exchange) would give us? If I understand correctly, the primary one seems to be that as you're authenticating to the TMG gateway, and if you don't authenticate you simply cannot throw exploit attempts at the IIS that's sitting on the Exchange boxes? Thanks, Paul ________________________________ MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist ********************************************************************** Do you know someone who makes you Proud of Stockport? Is there someone who goes out of their way to make our borough a special place? Then nominate them for an award in our 2012 citizen awards by going to www.stockport.gov.uk/proudofstockport Entries close on Friday 28 October. This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport ICT, Corporate & Support Services via email.qu...@stockport.gov.uk and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk ********************************************************************** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist