RE: E2K and SonicWALL

"Richardson, Stephan" <steric@xxxxxxxxxx> · Thu, 21 Feb 2002 16:53:16 -0500

Alex,
        My apologies, I did not realize you posted this request to both the
exchangelist and the isalist.  Still, I hope that this provides you with
enough information to get started.
        My highest recommendations about Exchange Server install and config
problems are to post to the public.microsoft.exchange.x groups.  The
resident experts, like Rich Matheisen, Kirill Palagin, and Chris Schraff,
among others, are unparalleled for thier Exchange Knowledge.  Its almost
like a free consultancy service with those guys, they are great.
        Of course, you could just google those newsgroup's archives
regarding firewalls and DMZs, and probably find a wealth of information all
ready there.

Stephan

-----Original Message-----
From: Alex Randjelovic [mailto:alex@xxxxxxxx]
Sent: Thursday, February 21, 2002 4:44 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: E2K and SonicWALL

http://www.ISAserver.org

This is really excellent information. Thank you

Alex Randjelovic
IT Manager
MagiTech, Inc.

-----Original Message-----
From: Richardson, Stephan [mailto:steric@xxxxxxxxxx] 
Sent: Thursday, February 21, 2002 4:28 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: E2K and SonicWALL

http://www.ISAserver.org

Alex,
        How does this relate to ISA server?

        If this is in regards to SonicWall, what do they recommend?  Where
does Microsoft specify that you place your E2K server?
        Unless you have something else (like q-mail) to act as an SMTP relay
in your DMZ, I would not recommend any Exchange mail system in a DMZ
setting.  Unless you were using a FE-BE Exchange server farm for OWA/IIS and
Exchange.  In that case, your FE OWA server would be most appropriate in the
DMZ, properly configured and secure of course.  Microsoft's site has a lot
more detail on that.  The reason I would shy away from Exchange in the DMZ
in internal client access to the DMZ for regular mail will be harder to
install, configure, maintain, and secure that an SMTP relay.
        Does your SonicWall offer an internal SMTP application level proxy?
Any SMTP proxy service?  Using that to front-end your Exchange server would
be best, then your Exchange server could sit inside.  That would lessen the
load on your SonicWall in regards to internal client to DMZ Exchange access
(which, with all that RPC traffic, will impact performance).  Then your
SonicWall only has to handle SMTP traffic to and from your Exchange server
and the Internet.

        If you cannot find more information on the Microsoft Exchange Site
regarding Exchange, post to microsoft.public.exchange2000.setup.installation
on Usenet or MSNews.  For more information regarding SonicWall, contact them
or join the firewall wizards list at
http://list.nfr.com/mailman/listinfo/firewall-wizards.  You can even read
their archives here. http://list.nfr.com/pipermail/firewall-wizards/  That
should provide you with some more information regarding your desired
firewall configuration.

Stephan

-----Original Message-----
From: Alex Randjelovic [mailto:alex@xxxxxxxx]
Sent: Thursday, February 21, 2002 4:08 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] E2K and SonicWALL

http://www.ISAserver.org

Hello all,
Where do I place Exchange 2000 server in reference to 3-interface firewall
(SonicWALL with DMZ)? Should it be on the private network or in DMZ?
Thank you for the help

Alex Randjelovic
IT Manager
MagiTech, Inc.
33999 Vokes drive
Eastlake, OH 44095
(440) 954-9330 ext. 309

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
steric@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
alex@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
steric@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: