Exchange Server Forums

Secure OWA with Checkpoint FW1

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Outlook Web Access >> Secure OWA with Checkpoint FW1

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Secure OWA with Checkpoint FW1 - 12.Aug.2008 6:52:49 AM

FCP

Posts: 1
Joined: 12.Aug.2008
Status: offline

Hi everyone. We have an Exchange 2003 server that our LAN users connect to via Outlook. We have also enabled OWA and our remote VPN uses sometimes use this when they connect over a slow line. I should also say that we use a Checkpoint FW1 cluster for out main Internet connection.

What is the best and easiest way to secure the Mailserver so users can access their mailboxes from the Internet using OWA without the use of a VPN client? I was going to place a front end server in our DMZ put reading the posts on the forum the opinion seems to be that this would not help from a security point of view.

Although we use FW1 for our main Internet connection, we do have an ISA box that we use as a glorified proxy server for incoming connections from our stores that have access to one web site (we are a retail company).

Post #: 1

Featured Links*

RE: Secure OWA with Checkpoint FW1 - 13.Aug.2008 12:13:22 AM

123raghu

Posts: 59
Joined: 18.Mar.2008
Status: offline

Hi,

If you want to make accessing OWA secure, then add a front-end server, then buy and install a 3rd party certificate on the FE exchange server and Enable "Require SSL" on the Exchange virtual directory under IIS manager, this is the best way I can think of to secure OWA.

And yes you are correct, having a FE in DMZ is complete waste, since you end up opening almost all the ports :)

_____________________________

It is not how much you do, but how much love you put in the doing......

(in reply to FCP)

Post #: 2