Re: Security Outlook Web Access

On Tue, 12 Jul 2005 10:09:03 -0700, "Maurizio Conti" <Maurizio
Conti@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

>Which e' the better configuration in order to approach to OWA from Internet?
>Front End in DMZ and Back End in Intranet ?

No.
The better solution is to have an ISA in a DMZ and then an FE in a
secured VLAN on the intranet. You don't necessarily need an FE, but an
FE in a DMZ is not a recommended configuration.
.

Relevant Pages

  • Re: Prividing Intranet Website Access To External Users
    ... I really wouldnt like to be having my company intranet on the ... I would probably integrate the ldap/dc as a security server on the ... >> The web server will be in the DMZ, and only port 443 will be ... >> intranets to the internet in a secure manner. ...
    (Security-Basics)
  • Re: general question on design options
    ... I'm running the configuration that you are considering. ... Behind that I have my ISA, ... How do you get the VPN connections that terminate on the Cisco to get past ... DMZ and not the LAN. ...
    (microsoft.public.isa)
  • Re: Designated NICs
    ... Since the 192.x.x.x is configured as the external NIC card to be on the PIX ... DMZ switch, would this subnet be consider internal or external? ... > Microsoft Internet Security & Acceleration Server: ... >> configuration, I was able to select and configure the internal network but ...
    (microsoft.public.isa.configuration)
  • Re: Trihomed DMZ just doesnt work
    ... about the external subnet containing the DMZ subnet. ... with you that my configuration should be.. ... Is it possible that ISA will not route correctly using a /25 subnet? ...
    (microsoft.public.isa)
  • Re: PIX proxy-arp question
    ... > ip address dmz 194.195.196.65 255.255.255.192 ... configuration, the network configured on the dmz interface is contained ... network and use it on your dmz interface. ... Set up statics for your servers using addresses from your address range ...
    (comp.security.firewalls)