RE: OWA on the ISA server
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Sat, 25 Jan 2003 11:49:06 -0600
Hi Andy,
It sounds like he wants to put together a Front End/Back End sort of
solution using the ISA Server itself at the Front End. Its an
interesting idea, in that many people feel that its better to have
external network clients interact with the ISA Server rather than the
Exchange Server on the internal network. The problem is how much do you
impact the security on the ISA Server itself when you publish WWW
services living on it viz. allowing external network clients to connect
to the Exchange Server. Its an interesting question and I don't have any
hard data on what would be more secure or pose less risk.
However, I would agree with everyone else here that probably the best
line of defense overall is to keep all extraneous services off the ISA
Server. Now, if you have a private address, back to back DMZ, then I
would consider going with this suggestion. Check out ISA Server and
Beyond for all sorts of details on OWA publishing and DMZs.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder <http://www.isaserver.org/shinder>
http://tinyurl.com/1jq1 <http://tinyurl.com/1jq1>
http://tinyurl.com/1llp <http://tinyurl.com/1llp>
-----Original Message-----
From: andy fairley [mailto:andy@xxxxxxxxxxxx]
Sent: Saturday, January 25, 2003 3:57 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] OWA on the ISA server
http://www.ISAserver.org
Dear Exchange list and ISAlist,
I have a working setup with ISA on one server and Exchange on
another. Only the ISA server has a public IP address. OWA is working via
SSL on the IIS services on the Exchange box, with HTTPS requests being
directed to it by ISA. This was setup by myself and has worked well for
a year.
We have just had a consultant suggest that it would be much
better if the ISA box did the IIS work for OWA, ie:- that the IIS
services on the ISA box dished up the pages for OWA. Is this possible?
It would mean starting the IIS services on the ISA box for a start, and
I don't think it would be able to use the default ports. What are you
feelings about this? I don't like to change a working setup but want the
advice of the experts.
many thanks
Andy Fairley
Opera North
Leeds UK
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
