Welcome to ISAserver.org

Where to place Exchange Server?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Exchange Publishing >> Where to place Exchange Server?

Page: [1]

Message

<< Older Topic Newer Topic >>

Where to place Exchange Server? - 18.Apr.2005 8:47:00 PM

dan.tesch

Posts: 25
Joined: 21.Oct.2004
From: Chicago
Status: offline

I have had an Exchange 2003 Server & ISA 2004 running for a while now and had intended on having inbound SMTP land on a server in my DMZ but have not been able to get the Exchange Server to pull the mail using ETRN like I wanted. I am now thinking of just publishing the Exchange Server which is on my LAN behind the ISA. Given the fact that I am not just opening port 25 and can take advantage of the ISA Server's ability to "filter" inbound SMTP I would like to get some opinions on this setup - I want this installation to be secure, how secure can I count on this being as I have outlined?

Post #: 1

Featured Links*

RE: Where to place Exchange Server? - 19.Apr.2005 12:07:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Dantel,

The good news is that no matter where you place the SMTP service behind the ISA firewall, its going to be more secure than what you have now [Smile]

If you have a single SMTP service accepting inbound connections, put it on the Default Internal Network.

If you're using an inbound SMTP relay, put it in a DMZ segment.

HTH,
Tom

(in reply to dan.tesch)

Post #: 2

RE: Where to place Exchange Server? - 19.Apr.2005 2:25:00 PM

dan.tesch

Posts: 25
Joined: 21.Oct.2004
From: Chicago
Status: offline

Hi Tom, I have your book but don't seem to find a chapter discussing this in detail, am I missing it? I also have a Cisco router that has the IOS with ipinspect included which from what I understand filters for "correct" SMTP commands - is this what the ISA would be doing? or is the protection more elaborate? Is putting a relay in a DMZ and having Exchange pull from it a "better" way to do it? I couldn't seem to get the ETRN working. Do you know of an article discussing this setup?

(in reply to dan.tesch)

Post #: 3