Exchange 2K3 2 Front-End Servers... 1 with SSL and one without?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Tony Su (anonymous_at_discussions.microsoft.com)
Date: 06/08/04


Date: Mon, 7 Jun 2004 23:06:25 -0700

Well, Patrick...

There are complicated solutions and simple solutions. Let
me recommend what I believe is the simplest way to go...

Follow the recommended methods to setup SBS Premium/ISA.
Re-configure the OWA (and other if you wish) Web
Publishing rules to bride both HTTP and HTTPS to HTTPS.

You will now be able to connect using HTTP only if you
wish.

Also, you may want to enable only Windows Integrated
authentication to protect your credentials.

Note that based on my research and verified by others'
experiences, you may run into certain configurations where
remote clients may have problems seeing OWA using Windows
Integrated or Digest compared to Basic.

Technically, you can explore various FE/BE and deploying
OWA differently than how I've recommended, but IMO they
won't give you better results.

Tony Su

>-----Original Message-----
>Greetings, I'm in process of planning an E2K upgrade
>currently I'm running W2K+E2K and plan to upgrade to
>W2K3+E2K3, I'm just not sure if it would be better to
>install 2 Front-End servers one for SSL and one without
>for our satalite network which can't use SSL... or is it
>possible to run both an SSL virtual site and a stand
>webmail server on the same Front-End Server?
>
>Thanks for any help.
>
>Patrick
>.
>



Relevant Pages

  • Re: RPC over HTTP
    ... RPC over HTTPS is the recommend way of doing this. ... Not sure why he would put a note in the article for not doing this other than for testing/lab environment or you already have VPN connectivity requirements for your external users but then why use RPC over HTTP anyways. ... While RPC over HTTP does not require SSL, ...
    (microsoft.public.exchange.misc)
  • Re: [fw-wiz] RE: Help. How to stop attacks on gateway/linux host.
    ... I recommend getting a good consultant. ... > - Run only http, https, ssh ... > We checked out firewall software price and it's expensive, ... Lots of expert support available. ...
    (Firewall-Wizards)
  • Re: [SLE] SSL Certificate
    ... On Thursday 30 September 2004 15:24, James Knott wrote: ... >> Can anyone recommend a good supplier of SSL ...
    (SuSE)
  • Re: SSH2 Tutorials
    ... The Secure Shell: The Definitive Guide". ... > SSL), from both a client and administrative point of view. ... > recommend some good reference links? ...
    (comp.unix.bsd.freebsd.misc)
  • Re: traffic encryption
    ... Could you recommend me some kind of 'SSL primer' to understand better the ... TH> There are flavors of IPSec that can traverse modern NAT ...
    (comp.security.unix)