RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-18 Thread Ed Crowley

Yes, but require SSL.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Anthony L.
Sollars
Sent: Wednesday, July 17, 2002 9:58 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


What would be the best way to implement OWA, for remote users in a 50
person company? The OWA service would be available to the internet. Is
my best bet, to just install OWA on the exchange server, which is how
our 5.5 is now, and allow traffic into our lan through the firewall?

Thanks,

tony

-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, July 17, 2002 4:59 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2

Au contraire. When users travel to branch offices, using OWA across the
intranet is a perfect way for them to check their mail with minimum
effort on their part.



-Original Message-
From: Jeffrey Dubyn [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 16, 2002 5:24 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


Just curious - isn't the fact that OWA is being used at all mean that
the box is exposed to the Internet, even if it's NAT'ed behind a
firewall?  The idea is to use this via the Internet, not an Intranet.
Thanks!

Jeff

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
Sent: Monday, July 15, 2002 11:37 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


I don't think there are any security benefits unless you're going to
expose it to the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



--
The information contained in this email message is privileged and
confidential information intended only for the use of the individual or
entity to whom it is addressed.  If the reader of this message is not
the intended recipient, you are hereby notified that any dissemination,
distribution or copy of this message is strictly prohibited.  If you
have received this email in error, please immediately notify Veronis
Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email
([EMAIL PROTECTED]) and delete the message.  Thank you.



==


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-18 Thread Anthony L. Sollars

Ok thanks for the input

-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, July 18, 2002 8:45 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2

Yes, but require SSL.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Anthony L.
Sollars
Sent: Wednesday, July 17, 2002 9:58 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


What would be the best way to implement OWA, for remote users in a 50
person company? The OWA service would be available to the internet. Is
my best bet, to just install OWA on the exchange server, which is how
our 5.5 is now, and allow traffic into our lan through the firewall?

Thanks,

tony

-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, July 17, 2002 4:59 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2

Au contraire. When users travel to branch offices, using OWA across the
intranet is a perfect way for them to check their mail with minimum
effort on their part.



-Original Message-
From: Jeffrey Dubyn [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 16, 2002 5:24 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


Just curious - isn't the fact that OWA is being used at all mean that
the box is exposed to the Internet, even if it's NAT'ed behind a
firewall?  The idea is to use this via the Internet, not an Intranet.
Thanks!

Jeff

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
Sent: Monday, July 15, 2002 11:37 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


I don't think there are any security benefits unless you're going to
expose it to the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



--
The information contained in this email message is privileged and
confidential information intended only for the use of the individual or
entity to whom it is addressed.  If the reader of this message is not
the intended recipient, you are hereby notified that any dissemination,
distribution or copy of this message is strictly prohibited.  If you
have received this email in error, please immediately notify Veronis
Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email
([EMAIL PROTECTED]) and delete the message.  Thank you.



==


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource

RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-17 Thread Andy David

Au contraire. When users travel to branch offices, using OWA across the
intranet is a perfect way for them to check their mail with minimum effort
on their part.



-Original Message-
From: Jeffrey Dubyn [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 16, 2002 5:24 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


Just curious - isn't the fact that OWA is being used at all mean that
the box is exposed to the Internet, even if it's NAT'ed behind a
firewall?  The idea is to use this via the Internet, not an Intranet.
Thanks!

Jeff

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
Sent: Monday, July 15, 2002 11:37 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


I don't think there are any security benefits unless you're going to
expose it to the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

--
The information contained in this email message is privileged and confidential 
information intended only for the use of the individual or entity to whom it is 
addressed.  If the reader of this message is not the intended recipient, you are 
hereby notified that any dissemination, distribution or copy of this message is 
strictly prohibited.  If you have received this email in error, please immediately 
notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or 
email ([EMAIL PROTECTED]) and delete the message.  Thank you.

==


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-17 Thread Chris Scharff

You could investigate implementing ISA or an e-gap solution to improve
security... ISA has broader functionality which might also be useful to the
organization. 

 -Original Message-
 From: Jeffrey Dubyn [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, July 16, 2002 10:33 PM
 To: Exchange Discussions
 Cc: 'Michael A. Brown'; Stan Martin
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 Thanks to all who replied!
 
 Bottom line is we will be using just the OWA on the lone Exchange Server
 on the LAN (not in the DMZ).   I'm still a little uncomfortable allowing
 traffic from the Internet onto the server, but it seems the best of all
 evils so to speak.  There's also the fact that the customer would not
 be too happy shelling out the $$ for the Enterprise edition.
 
 In answer to your question, Tony, yes you need the Enterprise Edition to
 use a Front-End Server (your OWA server).
 
 Jeff
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Anthony L.
 Sollars
 Sent: Tuesday, July 16, 2002 2:29 PM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 
 I am designing this exact system, but my plan is to use a front end
 exchange server on the intranet and a back-end OWA web server on the
 internet segmented in a DMZ. If this box does get compromised I don't
 want it having free access to the rest of my intranet.
 
 Do I have to have Enterprise edition Exch2k to have my OWA on a separate
 server?
 
 -TOny
 
 -Original Message-
 From: Ed Crowley [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, July 16, 2002 9:59 AM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 The advantage of deploying a front-end server is that your mailbox
 server isn't touched directly by an Internet user.  That is, you can
 configure your firewall to allow HTTPS only to the OWA server.  It's not
 a huge security benefit, in my opinion, but it might make you sleep
 better.  I agree with leaving the front-end server in the intranet and
 allowing HTTPS (SSL) only from the Internet.
 
 Ed Crowley MCSE+Internet MVP kcCC+I
 Tech Consultant
 hp Services
 Protecting the world from PSTs and Bricked Backups!
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
 Sent: Tuesday, July 16, 2002 2:24 AM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 
 Just curious - isn't the fact that OWA is being used at all mean that
 the box is exposed to the Internet, even if it's NAT'ed behind a
 firewall?  The idea is to use this via the Internet, not an Intranet.
 Thanks!
 
 Jeff
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
 Sent: Monday, July 15, 2002 11:37 PM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 
 I don't think there are any security benefits unless you're going to
 expose it to the Internet.
 
 Ed Crowley MCSE+Internet MVP kcCC+I
 Tech Consultant
 hp Services
 Protecting the world from PSTs and Bricked Backups!
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
 Sent: Monday, July 15, 2002 5:18 PM
 To: Exchange Discussions
 Cc: 'Michael A. Brown'; Stan Martin
 Subject: OWA Setup on a different machine on XCH2000 SP2
 
 
 We are looking to configure OWA for use with our lone Exchange 2000
 server (SP2).  Are there any security benefits to configuring this on a
 different machine than the Exchange server?  Also, do we need to have
 the Enterprise Edition of Exchange 2000 and configure it as a front-end
 server to do this?
 
 Thanks!
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED

RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-17 Thread Ken Cornetet

There's another option that should work here: Microsoft ISA server in the
DMZ forwarding http and https to the internal Exchange server.

I've never tried this, but it was what our Microsoft tech guy recommended
for putting OWA2K on the Internet. If we can talk our Internet hosting
service into this, it's the path we'll probably take.

I suppose Apache on (insert your favorite platform here) would work as well,
but again, I've never tried it.

-Original Message-
From: Jeffrey Dubyn [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 16, 2002 10:33 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


Thanks to all who replied!  

Bottom line is we will be using just the OWA on the lone Exchange Server
on the LAN (not in the DMZ).   I'm still a little uncomfortable allowing
traffic from the Internet onto the server, but it seems the best of all
evils so to speak.  There's also the fact that the customer would not
be too happy shelling out the $$ for the Enterprise edition.  

In answer to your question, Tony, yes you need the Enterprise Edition to
use a Front-End Server (your OWA server).  

Jeff

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Anthony L.
Sollars
Sent: Tuesday, July 16, 2002 2:29 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


I am designing this exact system, but my plan is to use a front end
exchange server on the intranet and a back-end OWA web server on the
internet segmented in a DMZ. If this box does get compromised I don't
want it having free access to the rest of my intranet. 

Do I have to have Enterprise edition Exch2k to have my OWA on a separate
server?

-TOny

-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 16, 2002 9:59 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2

The advantage of deploying a front-end server is that your mailbox
server isn't touched directly by an Internet user.  That is, you can
configure your firewall to allow HTTPS only to the OWA server.  It's not
a huge security benefit, in my opinion, but it might make you sleep
better.  I agree with leaving the front-end server in the intranet and
allowing HTTPS (SSL) only from the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Tuesday, July 16, 2002 2:24 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


Just curious - isn't the fact that OWA is being used at all mean that
the box is exposed to the Internet, even if it's NAT'ed behind a
firewall?  The idea is to use this via the Internet, not an Intranet.
Thanks!

Jeff

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
Sent: Monday, July 15, 2002 11:37 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


I don't think there are any security benefits unless you're going to
expose it to the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http

RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-17 Thread Anthony L. Sollars

What would be the best way to implement OWA, for remote users in a 50 person
company? The OWA service would be available to the internet. Is my best bet,
to just install OWA on the exchange server, which is how our 5.5 is now, and
allow traffic into our lan through the firewall?

Thanks,

tony

-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, July 17, 2002 4:59 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2

Au contraire. When users travel to branch offices, using OWA across the
intranet is a perfect way for them to check their mail with minimum effort
on their part.



-Original Message-
From: Jeffrey Dubyn [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 16, 2002 5:24 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


Just curious - isn't the fact that OWA is being used at all mean that
the box is exposed to the Internet, even if it's NAT'ed behind a
firewall?  The idea is to use this via the Internet, not an Intranet.
Thanks!

Jeff

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
Sent: Monday, July 15, 2002 11:37 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


I don't think there are any security benefits unless you're going to
expose it to the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


--
The information contained in this email message is privileged and
confidential information intended only for the use of the individual or
entity to whom it is addressed.  If the reader of this message is not the
intended recipient, you are hereby notified that any dissemination,
distribution or copy of this message is strictly prohibited.  If you have
received this email in error, please immediately notify Veronis Suhler
Stevenson by telephone (212)935-4990, fax (212)381-8168, or email
([EMAIL PROTECTED]) and delete the message.  Thank you.


==


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-16 Thread Jeffrey Dubyn

Just curious - isn't the fact that OWA is being used at all mean that
the box is exposed to the Internet, even if it's NAT'ed behind a
firewall?  The idea is to use this via the Internet, not an Intranet.
Thanks!

Jeff

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
Sent: Monday, July 15, 2002 11:37 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


I don't think there are any security benefits unless you're going to
expose it to the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-16 Thread Chris Scharff

How many security specialists do you have on staff for 45 users. If the
answer is the same as most 45 user companies I know, there's probably no
good reason to do it that way.

 -Original Message-
 From: Jeffrey Dubyn [mailto:[EMAIL PROTECTED]]
 Sent: Monday, July 15, 2002 9:59 PM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 Thanks!
 
 Any idea if there is a good (security?) reason to use a front-end server
 in such a small environment (1 server w/45 users)?
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of William
 Lefkovics
 Sent: Monday, July 15, 2002 10:50 PM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 
 That is correct.  Enterprise edition for the front-end.
 
 Exchange 2000 Front-End and Back-End Topology
 http://www.microsoft.com/exchange/techinfo/deployment/2000/E2KFrontBack.
 asp
 
 William
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
 Sent: Monday, July 15, 2002 5:18 PM
 To: Exchange Discussions
 Cc: 'Michael A. Brown'; Stan Martin
 Subject: OWA Setup on a different machine on XCH2000 SP2
 
 
 We are looking to configure OWA for use with our lone Exchange 2000
 server (SP2).  Are there any security benefits to configuring this on a
 different machine than the Exchange server?  Also, do we need to have
 the Enterprise Edition of Exchange 2000 and configure it as a front-end
 server to do this?
 
 Thanks!
 
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-16 Thread Chris Scharff

The fact that OWA is being used at all does not inherently mean that a box
is exposed to the internet.

 -Original Message-
 From: Jeffrey Dubyn [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, July 16, 2002 4:24 AM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 Just curious - isn't the fact that OWA is being used at all mean that
 the box is exposed to the Internet, even if it's NAT'ed behind a
 firewall?  The idea is to use this via the Internet, not an Intranet.
 Thanks!
 
 Jeff
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
 Sent: Monday, July 15, 2002 11:37 PM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 
 I don't think there are any security benefits unless you're going to
 expose it to the Internet.
 
 Ed Crowley MCSE+Internet MVP kcCC+I
 Tech Consultant
 hp Services
 Protecting the world from PSTs and Bricked Backups!
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
 Sent: Monday, July 15, 2002 5:18 PM
 To: Exchange Discussions
 Cc: 'Michael A. Brown'; Stan Martin
 Subject: OWA Setup on a different machine on XCH2000 SP2
 
 
 We are looking to configure OWA for use with our lone Exchange 2000
 server (SP2).  Are there any security benefits to configuring this on a
 different machine than the Exchange server?  Also, do we need to have
 the Enterprise Edition of Exchange 2000 and configure it as a front-end
 server to do this?
 
 Thanks!
 


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-16 Thread Ed Crowley

Agreed.  Plenty of folks have OWA without exposing it to the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Chris Scharff
Sent: Tuesday, July 16, 2002 8:07 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


The fact that OWA is being used at all does not inherently mean that a
box is exposed to the internet.

 -Original Message-
 From: Jeffrey Dubyn [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, July 16, 2002 4:24 AM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 Just curious - isn't the fact that OWA is being used at all mean that 
 the box is exposed to the Internet, even if it's NAT'ed behind a 
 firewall?  The idea is to use this via the Internet, not an Intranet. 
 Thanks!
 
 Jeff
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
 Sent: Monday, July 15, 2002 11:37 PM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 
 I don't think there are any security benefits unless you're going to 
 expose it to the Internet.
 
 Ed Crowley MCSE+Internet MVP kcCC+I
 Tech Consultant
 hp Services
 Protecting the world from PSTs and Bricked Backups!
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
 Sent: Monday, July 15, 2002 5:18 PM
 To: Exchange Discussions
 Cc: 'Michael A. Brown'; Stan Martin
 Subject: OWA Setup on a different machine on XCH2000 SP2
 
 
 We are looking to configure OWA for use with our lone Exchange 2000 
 server (SP2).  Are there any security benefits to configuring this on 
 a different machine than the Exchange server?  Also, do we need to 
 have the Enterprise Edition of Exchange 2000 and configure it as a 
 front-end server to do this?
 
 Thanks!
 


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-16 Thread Ed Crowley

The advantage of deploying a front-end server is that your mailbox
server isn't touched directly by an Internet user.  That is, you can
configure your firewall to allow HTTPS only to the OWA server.  It's not
a huge security benefit, in my opinion, but it might make you sleep
better.  I agree with leaving the front-end server in the intranet and
allowing HTTPS (SSL) only from the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Tuesday, July 16, 2002 2:24 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


Just curious - isn't the fact that OWA is being used at all mean that
the box is exposed to the Internet, even if it's NAT'ed behind a
firewall?  The idea is to use this via the Internet, not an Intranet.
Thanks!

Jeff

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
Sent: Monday, July 15, 2002 11:37 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


I don't think there are any security benefits unless you're going to
expose it to the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-16 Thread Anthony L. Sollars

I am designing this exact system, but my plan is to use a front end exchange
server on the intranet and a back-end OWA web server on the internet
segmented in a DMZ. If this box does get compromised I don't want it having
free access to the rest of my intranet. 

Do I have to have Enterprise edition Exch2k to have my OWA on a separate
server?

-TOny

-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 16, 2002 9:59 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2

The advantage of deploying a front-end server is that your mailbox
server isn't touched directly by an Internet user.  That is, you can
configure your firewall to allow HTTPS only to the OWA server.  It's not
a huge security benefit, in my opinion, but it might make you sleep
better.  I agree with leaving the front-end server in the intranet and
allowing HTTPS (SSL) only from the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Tuesday, July 16, 2002 2:24 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


Just curious - isn't the fact that OWA is being used at all mean that
the box is exposed to the Internet, even if it's NAT'ed behind a
firewall?  The idea is to use this via the Internet, not an Intranet.
Thanks!

Jeff

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
Sent: Monday, July 15, 2002 11:37 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


I don't think there are any security benefits unless you're going to
expose it to the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-16 Thread Chris Scharff

Have you looked at what ports and what machines your OWA server in the DMZ
has to communicate with on the internal LAN? Unless you have some good IDS
software and security skills, I don't believe that OWA in a DMZ alone meets
your desired objective.

 -Original Message-
 From: Anthony L. Sollars [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, July 16, 2002 1:29 PM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 I am designing this exact system, but my plan is to use a front end
 exchange
 server on the intranet and a back-end OWA web server on the internet
 segmented in a DMZ. If this box does get compromised I don't want it
 having
 free access to the rest of my intranet.
 
 Do I have to have Enterprise edition Exch2k to have my OWA on a separate
 server?
 
 -TOny
 
 -Original Message-
 From: Ed Crowley [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, July 16, 2002 9:59 AM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 The advantage of deploying a front-end server is that your mailbox
 server isn't touched directly by an Internet user.  That is, you can
 configure your firewall to allow HTTPS only to the OWA server.  It's not
 a huge security benefit, in my opinion, but it might make you sleep
 better.  I agree with leaving the front-end server in the intranet and
 allowing HTTPS (SSL) only from the Internet.
 
 Ed Crowley MCSE+Internet MVP kcCC+I
 Tech Consultant
 hp Services
 Protecting the world from PSTs and Bricked Backups!
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
 Sent: Tuesday, July 16, 2002 2:24 AM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 
 Just curious - isn't the fact that OWA is being used at all mean that
 the box is exposed to the Internet, even if it's NAT'ed behind a
 firewall?  The idea is to use this via the Internet, not an Intranet.
 Thanks!
 
 Jeff
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
 Sent: Monday, July 15, 2002 11:37 PM
 To: Exchange Discussions
 Subject: RE: OWA Setup on a different machine on XCH2000 SP2
 
 
 I don't think there are any security benefits unless you're going to
 expose it to the Internet.
 
 Ed Crowley MCSE+Internet MVP kcCC+I
 Tech Consultant
 hp Services
 Protecting the world from PSTs and Bricked Backups!
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
 Sent: Monday, July 15, 2002 5:18 PM
 To: Exchange Discussions
 Cc: 'Michael A. Brown'; Stan Martin
 Subject: OWA Setup on a different machine on XCH2000 SP2
 
 
 We are looking to configure OWA for use with our lone Exchange 2000
 server (SP2).  Are there any security benefits to configuring this on a
 different machine than the Exchange server?  Also, do we need to have
 the Enterprise Edition of Exchange 2000 and configure it as a front-end
 server to do this?
 
 Thanks!
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]
 
 _
 List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
 Archives:   http://www.swynk.com/sitesearch/search.asp
 To unsubscribe: mailto:[EMAIL PROTECTED]
 Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-16 Thread Ed Crowley

If you have a front-end-back-end arrangement, the front-end server is
your OWA server, and would be the one you'd put in a DMZ.  The problem
is that a front-end server needs access to several services, such as
Active Directory, to do its job.  Because of the number of ports you
must open between a front-end server and a global catalog server and
back-end Exchange servers (all of them!), I don't think it makes a whole
lot of sense to put a front-end server in a DMZ.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Anthony L.
Sollars
Sent: Tuesday, July 16, 2002 11:29 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


I am designing this exact system, but my plan is to use a front end
exchange server on the intranet and a back-end OWA web server on the
internet segmented in a DMZ. If this box does get compromised I don't
want it having free access to the rest of my intranet. 

Do I have to have Enterprise edition Exch2k to have my OWA on a separate
server?

-TOny

-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, July 16, 2002 9:59 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2

The advantage of deploying a front-end server is that your mailbox
server isn't touched directly by an Internet user.  That is, you can
configure your firewall to allow HTTPS only to the OWA server.  It's not
a huge security benefit, in my opinion, but it might make you sleep
better.  I agree with leaving the front-end server in the intranet and
allowing HTTPS (SSL) only from the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Tuesday, July 16, 2002 2:24 AM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


Just curious - isn't the fact that OWA is being used at all mean that
the box is exposed to the Internet, even if it's NAT'ed behind a
firewall?  The idea is to use this via the Internet, not an Intranet.
Thanks!

Jeff

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Ed Crowley
Sent: Monday, July 15, 2002 11:37 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


I don't think there are any security benefits unless you're going to
expose it to the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com

RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-15 Thread William Lefkovics

That is correct.  Enterprise edition for the front-end.

Exchange 2000 Front-End and Back-End Topology
http://www.microsoft.com/exchange/techinfo/deployment/2000/E2KFrontBack.
asp

William

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-15 Thread Ed Crowley

I don't think there are any security benefits unless you're going to
expose it to the Internet.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
hp Services
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-15 Thread Jeffrey Dubyn

Thanks!

Any idea if there is a good (security?) reason to use a front-end server
in such a small environment (1 server w/45 users)?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of William
Lefkovics
Sent: Monday, July 15, 2002 10:50 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


That is correct.  Enterprise edition for the front-end.

Exchange 2000 Front-End and Back-End Topology
http://www.microsoft.com/exchange/techinfo/deployment/2000/E2KFrontBack.
asp

William

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: OWA Setup on a different machine on XCH2000 SP2

2002-07-15 Thread William Lefkovics

Use SSL and I don't think there is much difference in terms of security.
I mean, that would not be the primary reason to go with a front-end
deployment.  

My thoughts only.

W

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 7:59 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


Thanks!

Any idea if there is a good (security?) reason to use a front-end server
in such a small environment (1 server w/45 users)?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of William
Lefkovics
Sent: Monday, July 15, 2002 10:50 PM
To: Exchange Discussions
Subject: RE: OWA Setup on a different machine on XCH2000 SP2


That is correct.  Enterprise edition for the front-end.

Exchange 2000 Front-End and Back-End Topology
http://www.microsoft.com/exchange/techinfo/deployment/2000/E2KFrontBack.
asp

William

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jeffrey Dubyn
Sent: Monday, July 15, 2002 5:18 PM
To: Exchange Discussions
Cc: 'Michael A. Brown'; Stan Martin
Subject: OWA Setup on a different machine on XCH2000 SP2


We are looking to configure OWA for use with our lone Exchange 2000
server (SP2).  Are there any security benefits to configuring this on a
different machine than the Exchange server?  Also, do we need to have
the Enterprise Edition of Exchange 2000 and configure it as a front-end
server to do this?

Thanks!



_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]