Re: OWA on the ISA server

  • From: "andy fairley" <andy@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 26 Jan 2003 00:41:32 -0000

MessageThanks Tom,

This is powerful ammunition!

Andy
  ----- Original Message ----- 
  From: Thomas W Shinder 
  To: [ISAserver.org Discussion List] 
  Sent: Sunday, January 26, 2003 12:31 AM
  Subject: [isalist] Re: OWA on the ISA server


  http://www.ISAserver.org


  Hi Andy,

  Let's put it this way. Unless you have a back to back ISA Server DMZ 
configuration, do NOT put anything on the ISA Server machine other than ISA 
Server. Disable all IIS services on the ISA Server. You have a good, secure 
configuration now. Why mess with and break it?

  HTH,
  Tom
  www.isaserver.org/shinder

    -----Original Message-----
    From: andy fairley [mailto:andy@xxxxxxxxxxxx] 
    Sent: Saturday, January 25, 2003 6:03 PM
    To: [ISAserver.org Discussion List]
    Subject: [isalist] Re: OWA on the ISA server


    http://www.ISAserver.org


    Thanks for the information and the support guys! When I first configured 
the system I used MS Knowledge Base articles and Tom's book and felt like I 
kind of knew what I was doing. (thanks for your message Tom!) This IT firm that 
is advising us were themselves still on NT and Proxy server when they were 
first hired! But they are quite cheap which suits Opera North who after all are 
paying a cellist peanuts to look after their firewall (and active directory and 
DNS,DHCP and terminal services and Exchange and SQL and sometimes SMS when I 
get a chance - and by the way I also design and update the website 
www.operanorth.co.uk )  You will understand that the value of the experience 
and advice of this list is enormous to someone like me! 

    I would be grateful for more support on this topic. If it is actually 
possible to move OWA to the ISA box what has to be done? (Just so I understand 
a wee bit more) The more information I have the easier it will be for me to 
persuade my colleagues that we don't need this sort of advice. None of my 
colleagues have any real understanding of the issues involved!

    many thanks

    Andy Fairley
    Opera North
    Leeds 
    England

    ----- Original Message ----- 
      From: andy fairley 
      To: [ISAserver.org Discussion List] 
      Sent: Saturday, January 25, 2003 9:56 AM
      Subject: [isalist] OWA on the ISA server


      http://www.ISAserver.org


      Dear Exchange list and ISAlist,

      I have a working setup with ISA on one server and Exchange on another. 
Only the ISA server has a public IP address. OWA is working via SSL on the IIS 
services on the Exchange box, with HTTPS requests being directed to it by ISA. 
This was setup by myself and has worked well for a year. 

      We have just had a consultant suggest that it would be much better if the 
ISA box did the IIS work for OWA, ie:- that the IIS services on the ISA box 
dished up the pages for OWA.  Is this possible? It would mean starting the IIS 
services on the ISA box for a start, and I don't think it would be able to use 
the default ports. What are you feelings about this? I don't like to change a 
working setup but want the advice of the experts.

      many thanks

      Andy Fairley
      Opera North
      Leeds UK
      ------------------------------------------------------
      List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
      ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
      ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
      ------------------------------------------------------
      Exchange Server Resource Site: http://www.msexchange.org/
      Windows Security Resource Site: http://www.windowsecurity.com/
      Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
      ------------------------------------------------------
      You are currently subscribed to this ISAserver.org Discussion List as: 
andy@xxxxxxxxxxxx
      To unsubscribe send a blank email to $subst('Email.Unsub') 
    ------------------------------------------------------
    List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
    ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
    ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
    ------------------------------------------------------
    Exchange Server Resource Site: http://www.msexchange.org/
    Windows Security Resource Site: http://www.windowsecurity.com/
    Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
    ------------------------------------------------------
    You are currently subscribed to this ISAserver.org Discussion List as: 
tshinder@xxxxxxxxxxxxxxxxxx
    To unsubscribe send a blank email to $subst('Email.Unsub') 
  ------------------------------------------------------
  List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
  ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
  ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
  ------------------------------------------------------
  Exchange Server Resource Site: http://www.msexchange.org/
  Windows Security Resource Site: http://www.windowsecurity.com/
  Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
  ------------------------------------------------------
  You are currently subscribed to this ISAserver.org Discussion List as: 
andy@xxxxxxxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: