Re: OWA 5.5 on a Stand Alone

From: mote (houndsman_at_nospam.nyc.rr.com)
Date: 08/17/04


Date: Mon, 16 Aug 2004 20:21:39 -0400

Martin,

     I don't recommend putting OWA in the DMZ, I definitively agree
with you there. But, wouldn't it be safer instead to setup an SMTP relay
in the DMZ which can also do Web proxy for greater security? I believe
this is worth considering, but if you have a small shop and can't afford
an extra box, than I whole-heartedly agree with you. OWA via SSL is
a good alternatively, if you have Windows 2003 you can use IIS 6.0
resource kit's SELFSSL utility. Alternatively, You can purchase a cert or
setup an internal CA with Win 2000/2003.

Cheers....

"Martin Blackstone [MVP - Exchange]" <martinb@myrealbox.com> wrote in
message news:eYeiZA%23gEHA.536@TK2MSFTNGP11.phx.gbl...
> First off, skip the DMZ stuff. Just leave OWA on the local LAN and use
SSL.
> If you insist on putting OWA in the DMZ, there is quite a bit of hole in
the
> firewall you will have to open. Enough to make it a pointless exercise.
> Don't forget to give all users the logon locally right to the OWA box.
>
> --
> Martin Blackstone
> MVP - Exchange
>
> http://www.swinc.com/resource/exchange.htm
>
>
> http://www.swinc.com/resource/e2kfaq_appxc.htm
> "ripnrow" <ripnrow@discussions.microsoft.com> wrote in message
> news:B2747BF8-7EE5-4A08-82DE-3F73BB93BDBD@microsoft.com...
> >I am trying to setup OWA on a stand alone server so that it can be moved
to
> >a
> > DMZ and use SSL but I'm having a login problem. The only way I can get
> > users
> > to login is if they are setup first as a Local user on this box and
their
> > user id & password must be the same as their domain user & password. Is
> > there
> > some way to set it up so I manage authentication for the domain only and
> > not
> > in 2 places?
>
>



Relevant Pages

  • Re: OWA in DMZ
    ... I'm trying to setup the OWA in the DMZ (As a front end server - exchange ...
    (microsoft.public.windows.server.networking)
  • Re: XP PRO Hack Attack--How?
    ... AntiVir AV software on the PC that was in the DMZ, setup a rule in Zone ... I put the VMWARE machine's IP address in the DMZ. ... DMZ and all port forwarding on my router. ...
    (comp.security.firewalls)
  • RE: [fw-wiz] Single Exchange/OWA on LAN with Internet Access - a good
    ... The ISA acting as a proxy in the DMZ is a good option I think ... because ISA is designed to work with OWA or is it the other way round. ... in the DMZ or an ISA Server. ...
    (Firewall-Wizards)
  • RE: Ye Olde OWA Topic (Was RE: Website inside or outside domain)
    ... with any DMZs or any other separation of OWA from your inside network. ... Of use your firewall to authenticate. ... where a public web server is in the DMZ and ... > How do I allow access to the back-end Exchange Server? ...
    (Focus-Microsoft)
  • Re: Ex2K3 access through firewall
    ... Mike Lawson typed: ... > impossible to connect a OL2K client running on W2K through a firewall ... > to Ex2K3 running on W2K3 sitting on the DMZ'. ... > message in OWA - "Moving or copying items between Exchange servers is ...
    (microsoft.public.exchange.setup)