Exchange Server Forums

Edge Transport Role question

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Installation >> Edge Transport Role question

Page: [1]

Message

<< Older Topic Newer Topic >>

Edge Transport Role question - 21.Nov.2007 8:48:40 AM

KenMorr

Posts: 2
Joined: 21.Nov.2007
Status: offline

Hi,
I'm in the process of planning the installation of Exchange 2007 with 250 users, 2- 2003 A/D severs, one GC (currently on Exchange 2003- single box - no F/E server) and want to confirm one thing and questions about other things:
1) The Edge Transport server role is best placed in the DMZ on a server with or without other funtions on it?
2) What O/S is needed for the Edge Transport Server role to be installed on?
3) What are the minimum hardware requirements for the role?

Thanks
Ken

Post #: 1

Featured Links*

RE: Edge Transport Role question - 21.Nov.2007 8:52:30 AM

rishishah

Posts: 784
Joined: 14.Nov.2006
From: Surrey, UK
Status: offline

1) Yes put it on the DMZ. You can add Gateway AV and Gway Anti-Spam
2) Windows 2003 STD 64Bit
3) Depends on your mail flow and Gateway AV and Antispam you deploy on it but i would go with atleast one 64 Bit Processor (two better if you can get it/afford it), 4GB RAM and a Raid 10 set disk configuration (for the OS and Exchange).

Although if you mailflow is low 2GB RAM and Raid 1 is enough.

_____________________________

Rishi Shah, MCP

Remember to backup before applying the advice. www.saiconsult.co.uk. Happy to provide Professional Exchange Server Consultancy to anywhere in the world.

(in reply to KenMorr)

Post #: 2

RE: Edge Transport Role question - 21.Nov.2007 8:57:22 AM

ismail.mohammed

Posts: 3018
Joined: 9.May2007
From: India
Status: offline

hi,

Edge server is used for Anti-spam and anti-virus updates so that before mails comes to in your organization it should filterize as per the technology and our business requirement. In Exchange 2003 there was issue of spamming, spoofing which has been reduced.

Edge server should always need to be setup in the DMZ that is the best practice.
If you are having small environment you can option out this Edge server and you can configure your Hub Server for enabling the Edge server functionality

For hardware require : 64 bit needs to implemented on production environment with 2 GB ram atleast

For more information on Exchange 2007 System Requirements
http://technet.microsoft.com/hi-in/library/aa996719.aspx

(in reply to KenMorr)

Post #: 3

RE: Edge Transport Role question - 21.Nov.2007 9:11:09 AM

KenMorr

Posts: 2
Joined: 21.Nov.2007
Status: offline

This is helping. Many Thanks.
We are already using a hardware appliance for the role of filtering and A/V. It's the Symantec Mail Security server. Would there be any advantage to using the Edge role in this case either as in addition to or replacing what is already there?
If not, what would be recommended as the best practice for OWA set up?
Thank you
Ken

(in reply to rishishah)

Post #: 4

RE: Edge Transport Role question - 21.Nov.2007 9:35:43 AM

rishishah

Posts: 784
Joined: 14.Nov.2006
From: Surrey, UK
Status: offline

OWA can only be done by the CAS server role.

If you are happy and your security policy allows you to receive mail with just one AV engine than you can get away without using the Hub Transport. However you will have to create a specific Send Connector on the Hub Transport to allow you to send and receive internet mail from the Symantect Mail Security Server.

You can than deploy CAS on this server to use for OWA, ActiveSync and even RCP over HTTPS all together.

Rishi

_____________________________

Rishi Shah, MCP

Remember to backup before applying the advice. www.saiconsult.co.uk. Happy to provide Professional Exchange Server Consultancy to anywhere in the world.

(in reply to KenMorr)

Post #: 5

RE: Edge Transport Role question - 16.Dec.2007 9:27:51 AM

vhato

Posts: 34
Joined: 6.Mar.2007
Status: offline

My environmet is similar. I installed the Anti-SPAM script and see it in my Hub Transport layer as mentioned above. However, I can't see any of Microsofts Anti-SPAM updates. Windows Updates shows them as instsalled. Do these updates ONLY apply to EDGE?

(in reply to rishishah)

Post #: 6

RE: Edge Transport Role question - 16.Dec.2007 12:01:12 PM

ismail.mohammed

Posts: 3018
Joined: 9.May2007
From: India
Status: offline

hi,

See this article : maily focus on question and answer round
Enabling Forefront Security Anti-spam Updates
http://msexchangeteam.com/archive/2007/01/03/432050.aspx

And read this entire article
Configuring Exchange 2007 Hub Transport role to receive Internet mail
http://msexchangeteam.com/archive/2006/11/17/431555.aspx

(in reply to vhato)

Post #: 7

RE: Edge Transport Role question - 16.Dec.2007 3:42:20 PM

vhato

Posts: 34
Joined: 6.Mar.2007
Status: offline

Thanks for the reply. From what I read is I can use Hub Transport and it will work. Unless I misunderstand. I ran Enable-AntispamUpdates -Identity SRVMAIL -IPReputationUpdatesEnabled $True -UpdateMode Automatic -SpamSignatureUpdatesEnabled $True And it now shows all features are enabled. However, items such as IP Allow List Providers, IP Blcok List Providers and Filtering options are all empty. I then ran Get-antispamupdates and it shows current information. What am I misunderstanding?

(in reply to ismail.mohammed)

Post #: 8

RE: Edge Transport Role question - 16.Dec.2007 10:25:51 PM

vhato

Posts: 34
Joined: 6.Mar.2007
Status: offline

Ok,
I did some more playing. The logs show Anti-SPAM is working. I just ASSumed I would have control over the contingencies Microsoft sends out daily as SPAM. So now I see the Block lists, etc are just for my custom inputs.

(in reply to vhato)

Post #: 9