Webserver WebMail and Security Options

My users need Webmail and Web based Exchange works great for them.

Sorry VPN is just too complicated for them and if I require it, they
will use their personel Hotmail accounts for business.

I've read many times don't enable Port 80 for security reasons. Web
Mail requires it. With it enabled for Web Mail only is that still a
security risk? Can I use a different port and will that help the
security issue?

I also need to put up a small Web Server (just a few static pages). To
minmize security I can use a seperate box from from the SBS Server (it
would be XP Pro/IIS). Can I have web requests go to a seperate box and
still have WebMail go to the SBS Server?

The SBS server does have 3 Network cards, but I'm only using one
because I have it behind a RV80 LinkSys box. I feel much safer not have
the SBS Server not directly connected to the puclic side in any way.
But if that can solve some of these issues I'd consider it, if it can
be done securely.

If I decided to go with third party for web service how would that
effect WebMail? Can that all be managed through the DNS records?

Thanks

.

Relevant Pages

  • Re: Problems with 529 Events
    ... Step 2: Configure account lockout policy. ... Windows Settings, double-click Security Settings, double-click Account ... The issue may occur if the remote SBS server sends broadcast ...
    (microsoft.public.windows.server.sbs)
  • RE: Using Web mail (hotmail, gmail, yahoo, etc) for Business mails
    ... Another issue with these webmail products is the mass storage that they now ... In highly secured environments they can pose as much of a security ... risk as USB drives and removable storage. ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • [NT] Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Argosoft Mail Server Pro contains a built-in HTTP server for webmail ... server or of the mail attachments for a valid user. ... Any Windows system using the webmail feature of Argosoft Mail Server Plus ...
    (Securiteam)
  • Re: Masses of 529 Errors!
    ... I posted here because it looked like a security issue to me. ... correlation b/ween connection attempts and the failed logon attempt. ... Workstation Name: <my sbs server> ... Caller Logon ID: ...
    (microsoft.public.security)
  • RE: Security Audit Issue - Please HELP!
    ... Windows Server 2003 Security Events ... Generally, it is usual we see lots of this event in the SBS server, since ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)