Re: Should I use a Front -End server



Stephen,

You're not really better off putting a seperate frontend in your DMZ subnet
than you are just throwing an SSL cert on the backend. With one mailbox
server, I'd just do the latter.

Check out the Front-end/back-end security question thread a couple down for
more chatter about this.

--
--Brian Desmond
Windows Server MVP
desmondb@xxxxxxxxxxxxxxxxxxxx

www.briandesmond.com


"StephenTMA" <StephenTMA@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8EA47C4E-E247-495C-8B24-30C446637F86@xxxxxxxxxxxxxxxx
>I am having a debate with a consultant who wants to put a front end server
> out on our DMZ to segregate any contact the outside world has with our
> network. He says that putting it and have the back-end go and retreive
> would
> provide the best security. We will have SMTP, POP, and OWA enabled. Now
> while I know and ISA for this would be MS choice and possibly the best,
> financially we cannot do that. My question is how much more vulnarable
> would
> we be just to put that all on the back-end in our network, of course using
> SSL.
>
> Thanks for your time


.



Relevant Pages

  • RE: Outlook and smartphone
    ... you'll need a real SSL cert (won't work with the self gernerated cert ... Assuming that the name of the server running SBS is sbsserver.exchange ... > Server Options, Connection Information)? ...
    (microsoft.public.windows.server.sbs)
  • Re: Ex2007 - SSL
    ... (ExternalDNS) ... The server name (NETBIOS & DNS) internally really is WCNODE08.mycompany.com ... When I purchased my SSL Cert, I used the FQDN of webmail.mycompany.com. ...
    (microsoft.public.exchange.admin)
  • 2 domain names, 1 IP, one SSL cert
    ... I have a web server with 2 domain names, one IP and a single SSL cert. ... The site on domain name two requires secure transactions of passwords and ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Configuring Exchange 2003 sp2 / MX records from ISP
    ... Currentlly I have setup my SSL Cert as my public IP and the ... the CEICW to switch to Exchange and create the certificate, ... Does it matter what I call my mail server in my MX record or A Record? ...
    (microsoft.public.windows.server.sbs)
  • Re: Ex2007 - SSL
    ... All is working fine from the outside (Outlook Anywhere/OWA/Active Sync, etc) but from the internal network, all the Outlook 2007 are showing the popup about the fact the certificate is not correct (as the name does not match the server FQDN). ... When I apply the SSL Cert, externally it works fine because it's accessed via WEBMAIL.mycompany.com. ...
    (microsoft.public.exchange.admin)