[isalist] Certificates for publishing Exchange 2007 with ISA Server 2006

  • From: Raji Arulambalam <Raji.Arulambalam@xxxxxxxxxxxxxx>
  • To: "[ISAserver Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 9 Apr 2009 15:09:00 +1200

http://www.ISAserver.org
-------------------------------------------------------


Hi

We have been using a self signed SAN certificate installed on the Exchange and 
ISA servers. This has worked well with only non-domain member  machines  and 
mobile active-sync users complaining about the certificates.
The ISA server is a member of the internal domain.

We now want to purchase a 3rd party SAN certificate and my questions are

- can we use separate certificates for communication between external users, 
ISA  and Exchange servers

- can we use the 3rd party certificate on the ISA server listener for external 
users only and then use the self-signed certificate for communication between 
ISA and Exchange server.

- if it is then where do I create the certificate request from - Exchange 
server or ISA server?

The SAN certificate contains:
webmail.domain.net
autodiscover.domainb.net
exch01.domain.local
exch01

The autodiscover domain is our email address domain.

Thanks

Raji A

Email disclaimer: This email and any attachments are confidential. If you are 
not the intended recipient, do not copy, disclose or use the contents in any 
way. If you receive this message in error, please let us know by return email 
and then destroy the message. Environment Bay of Plenty is not responsible for 
any changes made to this message and/or any attachments after sending.
******************************************************
This e-mail has been checked for viruses and none detected.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: