|
franzschenk -> Exchange 2003: SSL between FE and BE Server possible? (27.Aug.2003 11:09:00 AM)
|
We have to perform a large Exchange 2003 installation with a
Frontend/Backend Server architecture for secure OWA access from the
internet.
According to the MS document "Using Microsoft Exchange 2000 Front-End
Servers" (there is nothing about Exchange 2003 available), SSL communication
between the FE and BE servers is not possible. But it's unacceptable for our
customer that any internal user with a network monitor can see the domain
users User-ID and passwords when external users using OWA from the internet
or when they are using OWA from the internal network and connect directly to
the Backend Exchangeservers. And as far as I know, only "Basic
Authentication" works in a FE/BE Exchangeserver scenario.
Any advice how to close this security hole?
Thanks in advance for any help
Franz
|
|
|
|