Is there a way to place Exchange in DMZ ?

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Igor Dombrovan - 18 Nov 2005 10:38 GMT

Hi guys

Our organization is considering implementing Exchange and there's one point
I can't resolve.
As far as I understand, to let mobile users access our Exchange server I'll
have to implement an RPC ver HTTPS proxy and let them access our internal
Exchange server which in turn needs access to Active Directory servers. So
placing Exchange in DMZ without any access to LAN is not possible, right ? I
feel uncomfortable with that idea as I'm used to placing mail servers in DMZ
with no access to LAN to be sure if they're broken into only they will
suffer.

Any comments ?

Thanks in advance,
Igor

Reply to this Message

Paul Ford - 18 Nov 2005 20:32 GMT

You could put a Microsoft ISA server in the DMZ, its not best practice to
put Exchange in a DMZ as you have to "swiss cheese" (i.e. open lots of
ports) your firewall between internal network and DMZ.

Have a look at
http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3FrontBack/9cc35
7e9-ca39-49f0-823f-c2f0a316dbd4.mspx
and
http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/febetop.mspx

Regards

Paul Ford
Edge IT Ltd

> Hi guys
>
[quoted text clipped - 12 lines]
> Thanks in advance,
> Igor

Reply to this Message