Re: E2K3 OWA Topology with ISA Server

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: FE-FR (fe)
Date: 08/08/04 

Date: Sun, 8 Aug 2004 11:01:07 +0200

Hi,

With E2003 you have a lot of new things :
 * The OWA interface is like OL2003 (you have spell checker, ..)
 * As soon as you use HTTPS you can use GZIP compression. According to MS
benchmark you save 50 of the data
 * Authentication is better since you can tell OWA if you are on a secured
workstation (and so never be disconnected) or if a normal one (disconnected
after X minutes, ....)
 * authentication is now web based, and not anymore done via IE.

If you have multiple Exchange server, what you can do is this :

    * Install OWA on each Exchange Server (then you can modify a little bit
the OWA interface so you always know where you are)
    * Add a certificate for each of them such as : OWA1.company.com,
OW2.company.com, ...
    * Add a certificate on ISA with name '*.company.com'
    * Create one publishing rule for each of them

You can also create a 'OWA welcome page' where you can add 3 logos (with
hyperlinks for each OWA Server) ...

I hope this helps.

Regards 

-- 
FE (MVP ISA)
frederic@esnouf.net
You plan to implement Quarantine on ISA 2004 ?
Check this : http://www.esnouf.net/programs/QSS/qssinaction/QssInAction.htm
"Fred Yarbrough" <fyarbrou@yahoo.com> wrote in message
news:eAxYEIMfEHA.3476@tk2msftngp13.phx.gbl...
> We are currently running E5.5 and I have an Internet exposed hardened
> webserver with the OWA part installed on it.  We only allow SSL to
> authenticate mail users to this OWA site.  This has worked fine for
several
> years.
>
> We are looking to upgrade to E2K3 at the end of this year and I am looking
> at how to best setup the OWA for our E2K3 deployment.  I would like to
> improve our OWA security while I am at it.  We only have 1700 employees
and
> there are only 20 users or so connecting to OWA at a time.  Most articles
> that I have read talk about using Microsoft's ISA server to sit in the
DMZ.
> Evidently the ISA server is a hardened system used to translate between
your
> Internet accessible interface and the private server on the inside.  This
> seems fine and definitely easier than my current hardened web server
running
> OWA that is directly exposed to the Internet.
>
> My question is:  If I use a Microsoft ISA server to serve as my secured
> Internet exposed interface can I simply run the OWA directly from my email
> servers or do I still need to setup a separate OWA server like I currently
> have?  I don't want to keep adding Exchange servers especially just to
serve
> out OWA.  From what I understand, E2K3 now is defined as a Front End
server
> (OWA or POP) or a Back End server (MAPI).  The old E5.5 simply allowed you
> to install OWA onto any webserver.  Also, does anyone know if the ISA
server
> will allow you to serve out a loadbalanced OWA that points to all 3 of my
> Exchange servers?  This would be cool!
>
> Thanks,
> Fred
>
>

Relevant Pages

  • Re: OWA 403 access denied error
    ... not match the CN of the server. ... In the Paths Tab of the OWA Publishing Rule add the following path ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004 ... Microsoft Internet Security & Acceleration Server: ...
    (microsoft.public.isa)
  • RE: Adding OWA to the ISA2004 server on a second IP Address
    ... I need to add this email service to my ISA server." ... Create a server publishing rule to publish the OWA web site on the ISA ... Microsoft Online Partner Support ...
    (microsoft.public.isa)
  • OWA hangs on Loading
    ... OWA hungs in loading View this article only ... to OWA on the mailbox server from the mailbox server. ... 290177 XCCC: Browser May Not Display OWA Icons When Exchange 2000 Is Behind ...
    (microsoft.public.exchange2000.general)
  • Re: Cannot reply/forward in OWA - Page cannot be displayed
    ... I understand all the pictures in the OWA ... Check if OfficeScan is installed on the SBS server. ... Microsoft is providing this information as a convenience to you. ... Locate the Urlcache folder. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot reply/forward in OWA - Page cannot be displayed
    ... I understand all the pictures in the OWA ... IE, go to Tools -> Internet Options menu, go to Advanced tab, move down the ... Check if OfficeScan is installed on the SBS server. ... Microsoft is providing this information as a convenience to you. ...
    (microsoft.public.windows.server.sbs)