RPC/HTTPS Security Question... (Full Version)

All Forums >> [ISA 2006 Publishing] >> Exchange Publishing


charlieit -> RPC/HTTPS Security Question... (3.Nov.2009 1:18:05 PM)

I have OWA working beautifully using ISA 2006. I also have RPC over HTTPS working for Outlook clients who connect using VPN.

Question: Is it an "acceptable" security practice to allow Outlook clients to connect (using RPC over HTTP) WITHOUT using VPN? I don't feel as if it should be--because the only security OWA really provides is an encrypted username/password (which is what RPC over HTTP is doing)...right?

If it IS an acceptable practice, does anyone know where I can find how to setup ISA to do this?



paulo.oliveira -> RE: RPC/HTTPS Security Question... (4.Nov.2009 3:54:20 PM)


from my point of view it is a good security, specially when you have ISA in place. Besides the SSL encryption, you still have the advantage of ISA features like pre-authentication and application layer inspection.

On this web site there´s a lot of articles regarding this subject. Or you can take a look at Technet web site also.

Paulo Oliveira.

Page: [1]