• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Publishing OWA 2010 seurily in DMZ

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2010] >> Outlook Web Access >> Publishing OWA 2010 seurily in DMZ Page: [1]
Login
Message << Older Topic   Newer Topic >>
Publishing OWA 2010 seurily in DMZ - 7.Dec.2011 12:36:12 AM   
Majid Bin Sawad

 

Posts: 4
Joined: 7.Dec.2011
Status: offline
Gentlemen,

We have MS exchange 2010 in our org. we want to be able to access our mailboxes through OWA when we are at home using a web browser. What is the best way to publish OWA in the DMZ considering:

1- We have a web proxy (Websense) which is by the way not a reverse proxy.

2- We have an email gateway (Websense as well).

3- Our network is protected using 2 layers of firewalls.

4- We don't want to use MS TMG / MS ISA, since we already have firewalls and a proxy.

5- We got a Juniper SA box, but the number of concurrent sessions is very limited.

6- We want to maintain the security as much as possible.


So,

What are your advices?

Thanks in advance

< Message edited by Majid Bin Sawad -- 7.Dec.2011 12:51:32 AM >
Post #: 1
RE: Publishing OWA 2010 seurily in DMZ - 7.Dec.2011 7:46:29 AM   
mark@mvps.org

 

Posts: 6811
Joined: 9.Jun.2004
From: Philadelphia PA
Status: offline
Upgrade your option 5 or replace it with something else.
Just know that the CAS is not allowed in the DMZ so don't even make that option 7.

_____________________________

Mark Arnold (Exchange MVP)
List Moderator

(in reply to Majid Bin Sawad)
Post #: 2
RE: Publishing OWA 2010 seurily in DMZ - 7.Dec.2011 11:22:27 AM   
Majid Bin Sawad

 

Posts: 4
Joined: 7.Dec.2011
Status: offline
Thanks Mark for your response.

What about the way mentioned here:
http://community.spiceworks.com/topic/170411-exchange-2010-owa-and-edge

Is it secure/ recommended? Is there any problem in applying it?
Because it seems that is exactly what we need.

Please advise

Regards,

(in reply to mark@mvps.org)
Post #: 3
RE: Publishing OWA 2010 seurily in DMZ - 10.Dec.2011 2:17:26 PM   
Majid Bin Sawad

 

Posts: 4
Joined: 7.Dec.2011
Status: offline
Any help ..

(in reply to Majid Bin Sawad)
Post #: 4
RE: Publishing OWA 2010 seurily in DMZ - 10.Dec.2011 8:09:57 PM   
mark@mvps.org

 

Posts: 6811
Joined: 9.Jun.2004
From: Philadelphia PA
Status: offline
Do it if you want.
If it stops working you can't call Microsoft.
Apart from that, who cares. If you want to md the guy says it's ok, do it.

_____________________________

Mark Arnold (Exchange MVP)
List Moderator

(in reply to Majid Bin Sawad)
Post #: 5
RE: Publishing OWA 2010 seurily in DMZ - 11.Dec.2011 12:54:42 AM   
Majid Bin Sawad

 

Posts: 4
Joined: 7.Dec.2011
Status: offline
Thanks Mark,

So what is Microsoft recommendation?

Because it obvious from your reply that this approach is not recommended.

Regards,

(in reply to mark@mvps.org)
Post #: 6
RE: Publishing OWA 2010 seurily in DMZ - 11.Dec.2011 7:22:29 AM   
mark@mvps.org

 

Posts: 6811
Joined: 9.Jun.2004
From: Philadelphia PA
Status: offline
Direct 443 to the CAS. If you are a small business you can still use TMG/ISA.
Be less paranoid.
Use Juniper or Cisco or one of a myriad of other solutions.

_____________________________

Mark Arnold (Exchange MVP)
List Moderator

(in reply to Majid Bin Sawad)
Post #: 7

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2010] >> Outlook Web Access >> Publishing OWA 2010 seurily in DMZ Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter