Re: Deploy Exchange on DMZ or backend?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Jim Schwartz (shamusnc_at_poc.earthlink.net)
Date: 06/02/04


Date: Wed, 02 Jun 2004 00:18:06 GMT

If you are trying to connect your clients to the Exchange servers and they
are on the internal network you don't need to install anything in a DMZ. If
you want to NAT port 25 that's fine. If you're looking to put OWA in place,
I would put that on your corporate network and use a proxy or ISA in the
DMZ.

In my opinion, I wouldn't ever put anything that I'm not willing to lose in
a DMZ.

"newguy" <akalogerakis_donttypethispart_@hotmail.com> wrote in message
news:F125B4FE-7362-456C-BE84-2C2477C912A5@microsoft.com...
> Hello All,
>
> I am planning to deploy exchange 2003 in the next few months, but I have a
few questions. 1st, we are a company of about 100 users and maybe 150 email
addresses, we will be hosting this in our hosting environment, so i would
like to cluster exchange to have some type of redundancy. Now this will
obviously be a privately IP'd cluster, so should we just put a NAT in our
firewall and thats it? or should we put FE servers on a DMZ? and lastly, how
do you feel about ISA, is it a must when running exchange? Any help would be
great.
>
> Thank you



Relevant Pages

  • Re: Protecting an Exchange server?
    ... >internal network and place some kind of email appliance on our DMZ to ... It's not an appliance, per se, but pretty close. ... >appliance out on the Internet and my Exchange server behind the firewall on ... the box on the DMZ. ...
    (Security-Basics)
  • Re: Deploying microsoft exchange 2003
    ... Not recommended in the DMZ - it typically sits on your internal network, ... I haven't worked before with microsoft exchange but now, ... DMZ or inside. ... some clients in the external network. ...
    (microsoft.public.exchange.design)
  • RODC deployment in DMZ,
    ... I am in the middle of migration AD and Exchange. ... The client is asking if RODC is supported in DMZ. ... I am not able to locate any information so far if MS is supporting the RODC ... with limited risk towards your internal network when the box gets ...
    (microsoft.public.windows.server.active_directory)
  • Re: IPSec question
    ... Anti-Virus software is a fool - DMZ or not. ... > it and all of the Exchange Servers and all of the Domain Controllers. ... > That's either a fair amount of IPSec or a lot of holes in the firewall. ... the Exchange Servers and Domain Controllers! ...
    (microsoft.public.exchange.setup)
  • Re: IPSec question
    ... Anti-Virus software is a fool - DMZ or not. ... > it and all of the Exchange Servers and all of the Domain Controllers. ... > That's either a fair amount of IPSec or a lot of holes in the firewall. ... the Exchange Servers and Domain Controllers! ...
    (microsoft.public.exchange.admin)