Securing Exchange Server

Hello,

We are a small company and we are looking to implement Exchange as our main messaging system.

I wanted to ask for your suggestions as to the best method of securing the Exchange. We have a Watchguard firewall with an embeded DMZ. Is the front-end server the only way to go? Are there any appliances that do the job of a front-end server, without the risk of it being hacked or brought down?

I'm a little weary of opening the firewall ports from past experience. I had previously forwarded ports to FTP and VPN servers, and they always got hacked or had rootkits dropped in. I cannot take that chance with the Exchange.

Thank you for your input.

.

Relevant Pages

  • Re: OWA 2003 Logoff Button Results in Login Prompt
    ... > On the OWA front-end, we have Basic authentication enabled (so users dont ... > have to enter a domain\ at logon), and forms authentication is not enabled. ... Cannot Log off Exchange 2000 Front-End Server While You Are Using ...
    (microsoft.public.exchange.admin)
  • Re: E2k7 CAS/Mailbox server & E2k3 BE server-OWA and iPhone Active syn
    ... An Exchange 2007 CAS is supposed to be able to proxy requests for Exchange 2000 and 2003 servers like a front-end server would. ... I know that I've heard that you can't install an Exchange 2010 mailbox server into an organization with Exchange 2007 CAS or earlier front-end servers, because Exchange will throw an error, so I belive you misheard what was said. ...
    (microsoft.public.exchange.connectivity)
  • Re: OWA connectivity
    ... Exchange back-end servers." ... First I would check your firewall logs to check ... connectivity and rule out the possibility of a firewall misconfiguration. ... a front-end server in a DMZ that I was hitting for OWA but I was told by ...
    (microsoft.public.exchange.admin)
  • RE: Moving SMTP outbound mail from Exchange 5.5 to Exchange 2003
    ... to do that to each Exchange 2003 server you have. ... after you added the new SMTP outbound connector and changed the 5.5 IMC cost? ... My problem is mail flow outbound via my Exchange 2003 front-end server. ...
    (microsoft.public.exchange.setup)
  • Re: Outlook Web Access and Public Folders
    ... don't have an Exchange front-end server and therefore you just have back-end ... Exchange MVP ... > I am using Exchange 2003 and I have many public folders. ...
    (microsoft.public.exchange.setup)