Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Exchange 2003: SSL between FE and BE Server possible?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2003] >> Outlook Web Access >> Exchange 2003: SSL between FE and BE Server possible? Page: [1]
Login
Message << Older Topic   Newer Topic >>
Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM
TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!
Exchange 2003: SSL between FE and BE Server possible? - 27.Aug.2003 11:09:00 AM   
franzschenk

 

Posts: 1
Joined: 27.Aug.2003
From: Switzerland
Status: offline 		We have to perform a large Exchange 2003 installation with a
Frontend/Backend Server architecture for secure OWA access from the
internet.

According to the MS document "Using Microsoft Exchange 2000 Front-End
Servers" (there is nothing about Exchange 2003 available), SSL communication
between the FE and BE servers is not possible. But it's unacceptable for our
customer that any internal user with a network monitor can see the domain
users User-ID and passwords when external users using OWA from the internet
or when they are using OWA from the internal network and connect directly to
the Backend Exchangeservers. And as far as I know, only "Basic
Authentication" works in a FE/BE Exchangeserver scenario.

Any advice how to close this security hole?

Thanks in advance for any help
Franz
Post #: 1
RE: Exchange 2003: SSL between FE and BE Server possible? - 3.Sep.2003 7:49:00 PM   
tshinder

 

Posts: 100
Joined: 9.Jul.2002
From: USA
Status: offline 		Hi Franze,

You can use IPSec.

Check out my article on this subject:

http://www.tacteam.net/isaserverorg/exchangekit/2003febepub/2003FEBEPub.htm

HTH,
Tom

(in reply to franzschenk)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2003] >> Outlook Web Access >> Exchange 2003: SSL between FE and BE Server possible? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts