Re: frontend server in perimiter

Tech-Archive recommends: Speed Up your PC by fixing your registry

You should keep Exchange out of the DMZ and use ISA as a proxy.

Huge hassle with no gain, infact its less secure unless you are running IPSEC.

And thats not very secure either...
--
Jonathan
No Warrenties Implied, Did you do a FULL backup today??????




"Exchange 2003 connection problem" wrote:

> Andy,
>
> Is that the reason I cannot communicate with the domain servers...?
> Why can I use remote desktop ( from the Domian lan ) to the other servers
> in the perimiter and not to the FE server,...
> I cannot reach the FE server from the other server in the perimiter but I
> see the FE in their workgroup, but thats as far as it goes.
> I am satisfied with your advice , I will put the FE server back in the
> domain with the perimiter ip-adress , and then put the FE back in the
> perimiter , configure ip-sec and
> configure certifivates on the FE server for the OWA users.
>
> "Andy David - [MVP]" wrote:
>
> > On Sat, 7 Jan 2006 13:24:02 -0800, "Exchange 2003 connection problem"
> > <Exchange2003connectionproblem@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
> >
> > >Andy,
> > >
> > >Does this mean I have to give my FE exchange 2003 server a ip-adress in the
> > >domain range and it will keep the adress while standing in the perimiter.
> > >Thats what I am making up out of this,..I will try this monday first thing
> > >thank u for the fast reply...
> >
> > No, it means put the server back behind the firewall and re-add it to
> > the domain.
> >
> > >
> > >"Andy David - [MVP]" wrote:
> > >
> > >> On Sat, 7 Jan 2006 06:41:01 -0800, "Exchange 2003 connection problem"
> > >> <Exchange2003connectionproblem@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
> > >>
> > >> >Sinds I have put my exchange FE server in the perimiter, and configured the
> > >> >proper ports on my cisco pix firewall , now no communication to the Domain is
> > >> >possible.
> > >> The Front End server should be behind the firewall with a reverse
> > >> proxy in the DMZ.
> > >>
> > >> >I can send ping do, I must mention that I have configured my FE server when
> > >> >it was still in my Domain, I placed it in the perimiter and changed the
> > >> >membership to the workgroup , changed the Ip adress .
> > >>
> > >> Changed its membership to a workgroup? An exchange server has
> > >> to be a domain member.
> > >>
> > >> >I can use remote desktop for my other servers in the perimiter, so I guess
> > >> >its a local problem on my FE server.
> > >>
> > >> Yea, its in the DMZ and its no longer part of the domain
> > >> >I need to configure ipsec for secure communication but thats not the issue
> > >> >for having no communication to my intranet , I need to set up OWA for my
> > >> >users and am in kind of a hurry so all the help is welcome...
> > >> >
> > >>
> > >> Put it back behind the firewall, make it a domain member. Get
> > >> yourself a reverse-proxy and put that into the DMZ.
> > >>
> > >>
> > >> >
> > >> >
> > >>
> >
.

Relevant Pages

  • RE: Webserver on a DMZ still needed?
    ... OWA server. ... Webserver on a DMZ still needed? ... It is still recommended to have your exchange box (and any other outward ... to interact securely with the Domain Controller on the secure subnet? ...
    (Security-Basics)
  • Re: How to configure IMAP -SMTP securely for remote users tg
    ... Exchange config. ... So these connections are secure. ... > My problem is with the SMTP part. ... > this smtp virtual server. ...
    (microsoft.public.exchange.connectivity)
  • Re: Outlook Web Access!!
    ... The roll out would be on Exchange 2000. ... adamant that this is secure but i have yet to be persuaded. ... protect Exchange server in four different ways. ... Third, if you use OWA, you can use ISA servers http filtering to protect the ...
    (microsoft.public.security)
  • Re: Outlook Web Access!!
    ... The roll out would be on Exchange 2000. ... adamant that this is secure but i have yet to be persuaded. ... protect Exchange server in four different ways. ... Third, if you use OWA, you can use ISA servers http filtering to protect the ...
    (microsoft.public.win2000.security)
  • Re: Windows 2003 Domain Replication & Security
    ... Yes my first question is if it secure? ... Second the exchange server is runing as exchange as well as a dc and the ...
    (microsoft.public.windows.server.dns)