Help! Security issue in deployment of exchange server.

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Jimmy Jiang - 27 Aug 2004 15:30 GMT

Hi, everyone.

I need help regarding the subject. The scenario is that
our company wants to upgrade exchange server from 5.5 to
2003. The network infrastructure from extranet to intranet
is like this: T1->Cisco Router->Cisco PIX FW one port to
DMZ and one port to private LAN. What we are planning is
to deploy exchange server (only one, no front-end because
of the budget) in the private LAN. However, the thing is
that we have two branches in extranet. We have to alow
then to access the mail server as internal departments,
while ensuring the security for other servers and PCs in
the LAN as much as possible. This is a final decision and
we don't want to put the mail server in DMZ. Is there any
secured solutions for this specific scenario? or any
resources on the Internet that I can find? Any suggestion
or advice is greatly helpful and I appreciate it.

Jimmy Jiang

Reply to this Message

Al Mulnick - 27 Aug 2004 15:36 GMT

Two come to mind:
VPN and publishing your email resources using something like RPC/HTTP. The
clients would never notice a difference from being directly on the same
network as the Exchange server with RPC/HTTP. They would be on the same
network with VPN.

ISA server might be of interest to you for publishing resources out there.
You can publish RPC to the extranet, but ISP's might get in your way of
implementing that since some block the ports needed.

Al

> Hi, everyone.
>
[quoted text clipped - 15 lines]
>
> Jimmy Jiang

Reply to this Message