RE: Exchange OWA Front End Options: Part 2
How many out there are not even using front end security for OWA? I don't use it on my home OWA and haven't had problems, just run a firewall/router that protects against DOS type attacks. Keep your IIS hardened and passwords strong, https, etc. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
Your statement was ambiguous Andy. It was not clear whether his network or ISA was crap. I came. ISA. I conquered. Besides, I think ISA is more secure in its own "DMZ". -Original Message- From: Andy Shook [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 10:26 AM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Sorry, Troy. Have you heard of that new thing called 'sarcasm'? Andy -Original Message- From: Troy Meyer [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 1:22 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Oh geez not this crap again. Let the ISA [EMAIL PROTECTED] go full throttle. -Original Message- From: Andy Shook [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 10:16 AM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Actually, don't put ISA on your network b\c its CRAP! Shook -Original Message- From: Steve Moffat [mailto:[EMAIL PROTECTED] On Behalf Of Exchange (Sunbelt) Sent: Friday, January 25, 2008 1:15 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Don't put the ISA in a DMZ. More secure in the domain. S -Original Message- From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 2:07 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options I think an ISA or ISA like server/appliance in the DMZ is still your easiest and best solution to your immediate issue. VPN or SSL VPN is good but I would look at that as an addition to rather than a replacement for a simple ISA published OWA. A simple web address for a quick check of email while at a hotel can't be beat for user friendly. And certainly not an OWA server in the DMZ. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
Isa does the FBA Auth for you and can use many Auth methods between itself & the exchange box. It also publishes http/rpc securely. In fact it publishes all of exchange's services securely. S -Original Message- From: N Parr [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 2:23 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Front end security is something that if someone decides to attack OWA they aren't able to attack my Exchange box directly, they will only be attacking the device that authenticates you then passes you off to the actually web server on the exchange box. -Original Message- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 11:41 AM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options SSL Explorer is "free" and easy to use. But I'm not 100% sure what you mean by "front-end security". Regards, Michael B. Smith MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: N Parr [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 12:25 PM To: MS-Exchange Admin Issues Subject: Exchange OWA Front End Options I need some recommendations for front end security to OWA. We had a Network Engines ISA appliance up till now but it is having problems and is way past end of life. I know there are a lot of options like a front end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a simple relatively cheap solution that is more or less plug and play if something like that exists. I can't support web based SSL VPN currently, I think that would be nice and easy for users but there would be a lot of time and cost up front that I don't have. Am I wanting the world and not wanting to pay for it here? Any ideas? Thanks Niles ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
Sorry, Troy. Have you heard of that new thing called 'sarcasm'? Andy -Original Message- From: Troy Meyer [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 1:22 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Oh geez not this crap again. Let the ISA [EMAIL PROTECTED] go full throttle. -Original Message- From: Andy Shook [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 10:16 AM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Actually, don't put ISA on your network b\c its CRAP! Shook -Original Message- From: Steve Moffat [mailto:[EMAIL PROTECTED] On Behalf Of Exchange (Sunbelt) Sent: Friday, January 25, 2008 1:15 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Don't put the ISA in a DMZ. More secure in the domain. S -Original Message- From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 2:07 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options I think an ISA or ISA like server/appliance in the DMZ is still your easiest and best solution to your immediate issue. VPN or SSL VPN is good but I would look at that as an addition to rather than a replacement for a simple ISA published OWA. A simple web address for a quick check of email while at a hotel can't be beat for user friendly. And certainly not an OWA server in the DMZ. > -Original Message- > From: N Parr [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 12:25 PM > To: MS-Exchange Admin Issues > Subject: Exchange OWA Front End Options > > I need some recommendations for front end security to OWA. We had a > Network Engines ISA appliance up till now but it is having problems and > is way past end of life. I know there are a lot of options like a > front > end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a > simple relatively cheap solution that is more or less plug and play if > something like that exists. I can't support web based SSL VPN > currently, I think that would be nice and easy for users but there > would > be a lot of time and cost up front that I don't have. Am I wanting the > world and not wanting to pay for it here? Any ideas? > Thanks > Niles > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
master = master-bater -Original Message- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 1:33 PM To: MS-Exchange Admin Issues Subject: Re: Exchange OWA Front End Options Andy is a master. Learn from him. (someone owes me a beer for this set up) On Jan 25, 2008 1:26 PM, Andy Shook <[EMAIL PROTECTED]> wrote: > Sorry, Troy. Have you heard of that new thing called 'sarcasm'? > > Andy > > > -Original Message- > From: Troy Meyer [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 1:22 PM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > Oh geez not this crap again. > > Let the ISA [EMAIL PROTECTED] go full throttle. > > > > -Original Message- > From: Andy Shook [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 10:16 AM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > Actually, don't put ISA on your network b\c its CRAP! > > Shook > > -Original Message- > From: Steve Moffat [mailto:[EMAIL PROTECTED] On Behalf Of Exchange > (Sunbelt) > Sent: Friday, January 25, 2008 1:15 PM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > Don't put the ISA in a DMZ. More secure in the domain. > > S > > -Original Message- > From: Kennedy, Jim [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 2:07 PM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > I think an ISA or ISA like server/appliance in the DMZ is still your > easiest and best solution to your immediate issue. VPN or SSL VPN is > good but I would look at that as an addition to rather than a > replacement for a simple ISA published OWA. A simple web address for a > quick check of email while at a hotel can't be beat for user friendly. > > And certainly not an OWA server in the DMZ. > > > > > -Original Message- > > From: N Parr [mailto:[EMAIL PROTECTED] > > Sent: Friday, January 25, 2008 12:25 PM > > To: MS-Exchange Admin Issues > > Subject: Exchange OWA Front End Options > > > > I need some recommendations for front end security to OWA. We had a > > Network Engines ISA appliance up till now but it is having problems > and > > is way past end of life. I know there are a lot of options like a > > front > > end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a > > simple relatively cheap solution that is more or less plug and play if > > something like that exists. I can't support web based SSL VPN > > currently, I think that would be nice and easy for users but there > > would > > be a lot of time and cost up front that I don't have. Am I wanting > the > > world and not wanting to pay for it here? Any ideas? > > Thanks > > Niles > > > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: Exchange OWA Front End Options
Andy is a master. Learn from him. (someone owes me a beer for this set up) On Jan 25, 2008 1:26 PM, Andy Shook <[EMAIL PROTECTED]> wrote: > Sorry, Troy. Have you heard of that new thing called 'sarcasm'? > > Andy > > > -Original Message- > From: Troy Meyer [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 1:22 PM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > Oh geez not this crap again. > > Let the ISA [EMAIL PROTECTED] go full throttle. > > > > -Original Message- > From: Andy Shook [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 10:16 AM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > Actually, don't put ISA on your network b\c its CRAP! > > Shook > > -Original Message- > From: Steve Moffat [mailto:[EMAIL PROTECTED] On Behalf Of Exchange > (Sunbelt) > Sent: Friday, January 25, 2008 1:15 PM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > Don't put the ISA in a DMZ. More secure in the domain. > > S > > -Original Message- > From: Kennedy, Jim [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 2:07 PM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > I think an ISA or ISA like server/appliance in the DMZ is still your > easiest and best solution to your immediate issue. VPN or SSL VPN is > good but I would look at that as an addition to rather than a > replacement for a simple ISA published OWA. A simple web address for a > quick check of email while at a hotel can't be beat for user friendly. > > And certainly not an OWA server in the DMZ. > > > > > -Original Message- > > From: N Parr [mailto:[EMAIL PROTECTED] > > Sent: Friday, January 25, 2008 12:25 PM > > To: MS-Exchange Admin Issues > > Subject: Exchange OWA Front End Options > > > > I need some recommendations for front end security to OWA. We had a > > Network Engines ISA appliance up till now but it is having problems > and > > is way past end of life. I know there are a lot of options like a > > front > > end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a > > simple relatively cheap solution that is more or less plug and play if > > something like that exists. I can't support web based SSL VPN > > currently, I think that would be nice and easy for users but there > > would > > be a lot of time and cost up front that I don't have. Am I wanting > the > > world and not wanting to pay for it here? Any ideas? > > Thanks > > Niles > > > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
Much of the way a "front-end" works changes in Exch 2007. Regardless, I think your best option is some sort reverse proxy if you really do not want people accessing any of your Exch servers directly. -Original Message- From: N Parr [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 1:23 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Front end security is something that if someone decides to attack OWA they aren't able to attack my Exchange box directly, they will only be attacking the device that authenticates you then passes you off to the actually web server on the exchange box. -Original Message- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 11:41 AM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options SSL Explorer is "free" and easy to use. But I'm not 100% sure what you mean by "front-end security". Regards, Michael B. Smith MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: N Parr [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 12:25 PM To: MS-Exchange Admin Issues Subject: Exchange OWA Front End Options I need some recommendations for front end security to OWA. We had a Network Engines ISA appliance up till now but it is having problems and is way past end of life. I know there are a lot of options like a front end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a simple relatively cheap solution that is more or less plug and play if something like that exists. I can't support web based SSL VPN currently, I think that would be nice and easy for users but there would be a lot of time and cost up front that I don't have. Am I wanting the world and not wanting to pay for it here? Any ideas? Thanks Niles ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
Gee, sounds like a reason to put ISA in the DMZ and not make it a domain member ;) -Original Message- From: N Parr [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 10:23 AM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Front end security is something that if someone decides to attack OWA they aren't able to attack my Exchange box directly, they will only be attacking the device that authenticates you then passes you off to the actually web server on the exchange box. -Original Message- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 11:41 AM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options SSL Explorer is "free" and easy to use. But I'm not 100% sure what you mean by "front-end security". Regards, Michael B. Smith MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: N Parr [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 12:25 PM To: MS-Exchange Admin Issues Subject: Exchange OWA Front End Options I need some recommendations for front end security to OWA. We had a Network Engines ISA appliance up till now but it is having problems and is way past end of life. I know there are a lot of options like a front end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a simple relatively cheap solution that is more or less plug and play if something like that exists. I can't support web based SSL VPN currently, I think that would be nice and easy for users but there would be a lot of time and cost up front that I don't have. Am I wanting the world and not wanting to pay for it here? Any ideas? Thanks Niles ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: Exchange OWA Front End Options
http://en.wikipedia.org/wiki/The_Imperial_March On Jan 25, 2008 1:22 PM, Troy Meyer <[EMAIL PROTECTED]> wrote: > Oh geez not this crap again. > > Let the ISA [EMAIL PROTECTED] go full throttle. > > > > > -Original Message- > From: Andy Shook [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 10:16 AM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > Actually, don't put ISA on your network b\c its CRAP! > > Shook > > -Original Message- > From: Steve Moffat [mailto:[EMAIL PROTECTED] On Behalf Of Exchange > (Sunbelt) > Sent: Friday, January 25, 2008 1:15 PM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > Don't put the ISA in a DMZ. More secure in the domain. > > S > > -Original Message- > From: Kennedy, Jim [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 2:07 PM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > I think an ISA or ISA like server/appliance in the DMZ is still your > easiest and best solution to your immediate issue. VPN or SSL VPN is > good but I would look at that as an addition to rather than a > replacement for a simple ISA published OWA. A simple web address for a > quick check of email while at a hotel can't be beat for user friendly. > > And certainly not an OWA server in the DMZ. > > > > > -Original Message- > > From: N Parr [mailto:[EMAIL PROTECTED] > > Sent: Friday, January 25, 2008 12:25 PM > > To: MS-Exchange Admin Issues > > Subject: Exchange OWA Front End Options > > > > I need some recommendations for front end security to OWA. We had a > > Network Engines ISA appliance up till now but it is having problems > and > > is way past end of life. I know there are a lot of options like a > > front > > end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a > > simple relatively cheap solution that is more or less plug and play if > > something like that exists. I can't support web based SSL VPN > > currently, I think that would be nice and easy for users but there > > would > > be a lot of time and cost up front that I don't have. Am I wanting > the > > world and not wanting to pay for it here? Any ideas? > > Thanks > > Niles > > > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
Re: Exchange OWA Front End Options
ooo, 'dems fightin' werds! On Jan 25, 2008 1:16 PM, Andy Shook <[EMAIL PROTECTED]> wrote: > Actually, don't put ISA on your network b\c its CRAP! > > Shook > > > -Original Message- > From: Steve Moffat [mailto:[EMAIL PROTECTED] On Behalf Of Exchange > (Sunbelt) > Sent: Friday, January 25, 2008 1:15 PM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > Don't put the ISA in a DMZ. More secure in the domain. > > S > > -Original Message- > From: Kennedy, Jim [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 2:07 PM > To: MS-Exchange Admin Issues > Subject: RE: Exchange OWA Front End Options > > I think an ISA or ISA like server/appliance in the DMZ is still your > easiest and best solution to your immediate issue. VPN or SSL VPN is > good but I would look at that as an addition to rather than a > replacement for a simple ISA published OWA. A simple web address for a > quick check of email while at a hotel can't be beat for user friendly. > > And certainly not an OWA server in the DMZ. > > > > > -Original Message- > > From: N Parr [mailto:[EMAIL PROTECTED] > > Sent: Friday, January 25, 2008 12:25 PM > > To: MS-Exchange Admin Issues > > Subject: Exchange OWA Front End Options > > > > I need some recommendations for front end security to OWA. We had a > > Network Engines ISA appliance up till now but it is having problems > and > > is way past end of life. I know there are a lot of options like a > > front > > end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a > > simple relatively cheap solution that is more or less plug and play if > > something like that exists. I can't support web based SSL VPN > > currently, I think that would be nice and easy for users but there > > would > > be a lot of time and cost up front that I don't have. Am I wanting > the > > world and not wanting to pay for it here? Any ideas? > > Thanks > > Niles > > > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ > -- ME2 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
What would you recommend instead? -Original Message- From: Andy Shook [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 11:16 AM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Actually, don't put ISA on your network b\c its CRAP! Shook -Original Message- From: Steve Moffat [mailto:[EMAIL PROTECTED] On Behalf Of Exchange (Sunbelt) Sent: Friday, January 25, 2008 1:15 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Don't put the ISA in a DMZ. More secure in the domain. S -Original Message- From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 2:07 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options I think an ISA or ISA like server/appliance in the DMZ is still your easiest and best solution to your immediate issue. VPN or SSL VPN is good but I would look at that as an addition to rather than a replacement for a simple ISA published OWA. A simple web address for a quick check of email while at a hotel can't be beat for user friendly. And certainly not an OWA server in the DMZ. > -Original Message- > From: N Parr [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 12:25 PM > To: MS-Exchange Admin Issues > Subject: Exchange OWA Front End Options > > I need some recommendations for front end security to OWA. We had a > Network Engines ISA appliance up till now but it is having problems and > is way past end of life. I know there are a lot of options like a > front > end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a > simple relatively cheap solution that is more or less plug and play if > something like that exists. I can't support web based SSL VPN > currently, I think that would be nice and easy for users but there > would > be a lot of time and cost up front that I don't have. Am I wanting the > world and not wanting to pay for it here? Any ideas? > Thanks > Niles > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
Front end security is something that if someone decides to attack OWA they aren't able to attack my Exchange box directly, they will only be attacking the device that authenticates you then passes you off to the actually web server on the exchange box. -Original Message- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 11:41 AM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options SSL Explorer is "free" and easy to use. But I'm not 100% sure what you mean by "front-end security". Regards, Michael B. Smith MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: N Parr [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 12:25 PM To: MS-Exchange Admin Issues Subject: Exchange OWA Front End Options I need some recommendations for front end security to OWA. We had a Network Engines ISA appliance up till now but it is having problems and is way past end of life. I know there are a lot of options like a front end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a simple relatively cheap solution that is more or less plug and play if something like that exists. I can't support web based SSL VPN currently, I think that would be nice and easy for users but there would be a lot of time and cost up front that I don't have. Am I wanting the world and not wanting to pay for it here? Any ideas? Thanks Niles ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
Oh geez not this crap again. Let the ISA [EMAIL PROTECTED] go full throttle. -Original Message- From: Andy Shook [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 10:16 AM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Actually, don't put ISA on your network b\c its CRAP! Shook -Original Message- From: Steve Moffat [mailto:[EMAIL PROTECTED] On Behalf Of Exchange (Sunbelt) Sent: Friday, January 25, 2008 1:15 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Don't put the ISA in a DMZ. More secure in the domain. S -Original Message- From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 2:07 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options I think an ISA or ISA like server/appliance in the DMZ is still your easiest and best solution to your immediate issue. VPN or SSL VPN is good but I would look at that as an addition to rather than a replacement for a simple ISA published OWA. A simple web address for a quick check of email while at a hotel can't be beat for user friendly. And certainly not an OWA server in the DMZ. > -Original Message- > From: N Parr [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 12:25 PM > To: MS-Exchange Admin Issues > Subject: Exchange OWA Front End Options > > I need some recommendations for front end security to OWA. We had a > Network Engines ISA appliance up till now but it is having problems and > is way past end of life. I know there are a lot of options like a > front > end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a > simple relatively cheap solution that is more or less plug and play if > something like that exists. I can't support web based SSL VPN > currently, I think that would be nice and easy for users but there > would > be a lot of time and cost up front that I don't have. Am I wanting the > world and not wanting to pay for it here? Any ideas? > Thanks > Niles > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
Actually, don't put ISA on your network b\c its CRAP! Shook -Original Message- From: Steve Moffat [mailto:[EMAIL PROTECTED] On Behalf Of Exchange (Sunbelt) Sent: Friday, January 25, 2008 1:15 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options Don't put the ISA in a DMZ. More secure in the domain. S -Original Message- From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 2:07 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options I think an ISA or ISA like server/appliance in the DMZ is still your easiest and best solution to your immediate issue. VPN or SSL VPN is good but I would look at that as an addition to rather than a replacement for a simple ISA published OWA. A simple web address for a quick check of email while at a hotel can't be beat for user friendly. And certainly not an OWA server in the DMZ. > -Original Message- > From: N Parr [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 12:25 PM > To: MS-Exchange Admin Issues > Subject: Exchange OWA Front End Options > > I need some recommendations for front end security to OWA. We had a > Network Engines ISA appliance up till now but it is having problems and > is way past end of life. I know there are a lot of options like a > front > end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a > simple relatively cheap solution that is more or less plug and play if > something like that exists. I can't support web based SSL VPN > currently, I think that would be nice and easy for users but there > would > be a lot of time and cost up front that I don't have. Am I wanting the > world and not wanting to pay for it here? Any ideas? > Thanks > Niles > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
Don't put the ISA in a DMZ. More secure in the domain. S -Original Message- From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 2:07 PM To: MS-Exchange Admin Issues Subject: RE: Exchange OWA Front End Options I think an ISA or ISA like server/appliance in the DMZ is still your easiest and best solution to your immediate issue. VPN or SSL VPN is good but I would look at that as an addition to rather than a replacement for a simple ISA published OWA. A simple web address for a quick check of email while at a hotel can't be beat for user friendly. And certainly not an OWA server in the DMZ. > -Original Message- > From: N Parr [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 12:25 PM > To: MS-Exchange Admin Issues > Subject: Exchange OWA Front End Options > > I need some recommendations for front end security to OWA. We had a > Network Engines ISA appliance up till now but it is having problems and > is way past end of life. I know there are a lot of options like a > front > end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a > simple relatively cheap solution that is more or less plug and play if > something like that exists. I can't support web based SSL VPN > currently, I think that would be nice and easy for users but there > would > be a lot of time and cost up front that I don't have. Am I wanting the > world and not wanting to pay for it here? Any ideas? > Thanks > Niles > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
I think an ISA or ISA like server/appliance in the DMZ is still your easiest and best solution to your immediate issue. VPN or SSL VPN is good but I would look at that as an addition to rather than a replacement for a simple ISA published OWA. A simple web address for a quick check of email while at a hotel can't be beat for user friendly. And certainly not an OWA server in the DMZ. > -Original Message- > From: N Parr [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 12:25 PM > To: MS-Exchange Admin Issues > Subject: Exchange OWA Front End Options > > I need some recommendations for front end security to OWA. We had a > Network Engines ISA appliance up till now but it is having problems and > is way past end of life. I know there are a lot of options like a > front > end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a > simple relatively cheap solution that is more or less plug and play if > something like that exists. I can't support web based SSL VPN > currently, I think that would be nice and easy for users but there > would > be a lot of time and cost up front that I don't have. Am I wanting the > world and not wanting to pay for it here? Any ideas? > Thanks > Niles > > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ > ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange OWA Front End Options
SSL Explorer is "free" and easy to use. But I'm not 100% sure what you mean by "front-end security". Regards, Michael B. Smith MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: N Parr [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 12:25 PM To: MS-Exchange Admin Issues Subject: Exchange OWA Front End Options I need some recommendations for front end security to OWA. We had a Network Engines ISA appliance up till now but it is having problems and is way past end of life. I know there are a lot of options like a front end server in the DMZ, another ISA box, SSLVPN, etc. I kind of want a simple relatively cheap solution that is more or less plug and play if something like that exists. I can't support web based SSL VPN currently, I think that would be nice and easy for users but there would be a lot of time and cost up front that I don't have. Am I wanting the world and not wanting to pay for it here? Any ideas? Thanks Niles ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
