Publish Exchange without certificate .. is this possible (Full Version)

All Forums >> [ISA 2006 Publishing] >> Exchange Publishing



Message

Freekeko -> Publish Exchange without certificate .. is this possible (21.Dec.2010 3:14:25 AM)

Hello,


I want to know can I publish Exchange 2010 without certificate cause I don't want to buy any certificate .

I tried to publish it but I dont know how since the exchange owa url is https:\\



paulo.oliveira -> RE: Publish Exchange without certificate .. is this possible (21.Dec.2010 6:41:29 AM)

Hi,

although not recommended, you can.

If you donīt want to buy a certificate, then you also have the option to use Windows CA server.

For publishing an Exchange 2010 using ISA 2006 SP1, there is a great article from Exchange team: http://msexchangeteam.com/archive/2009/12/17/453625.aspx

Regards,
Paulo Oliveira.



Freekeko -> RE: Publish Exchange without certificate .. is this possible (21.Dec.2010 9:15:00 AM)

unfortunately we didn't have Windows CA server , so how can I publish the exchange without certificate



paulo.oliveira -> RE: Publish Exchange without certificate .. is this possible (21.Dec.2010 9:42:19 AM)

Hi,

Exchange was built with security in mind, the default option is to use SSL. You must turn SSL off if you really want to publish it using non-secure connection.

Regards,
Paulo Oliveira.



Jason Jones -> RE: Publish Exchange without certificate .. is this possible (21.Dec.2010 9:59:26 AM)

So, you like the idea of your users transmitting usernames and passwords in the clear across the Internet then?

When SSL certs can be had so cheap (Ģ40 from godaddy and even free if you look around) why would you ever risk not using HTTPS? [&:]

There is likely to be very little guidance on doing it with HTTP only, as this is a pretty poor solution security wise...

Cheers

JJ



Freekeko -> RE: Publish Exchange without certificate .. is this possible (22.Dec.2010 2:19:07 AM)

I don't mean to using HTTP, I mean to use HTTPS that include with Exchange Server not the one with ISA server , because the ISA require certificate if I'll use HTTPS



paulo.oliveira -> RE: Publish Exchange without certificate .. is this possible (22.Dec.2010 9:32:35 AM)

Hi,

actually, is more secure you install certificate on ISA than on Exchange it self. Since, ISA will be the one facing the internet and authenticating users.

ISA server has the following options to bridge connections:
SSL-to-SSL: Internet<---->SSL<---->ISA<---->SSL<---->Exchange
SSL-to-HTTP: Internet<---->SSL<---->ISA<---->HTTP<---->Exchange
HTTP-to-HTTP: Internet<---->HTTP<---->ISA<---->HTTP<---->Exchange
HTTP-to-SSL: Internet<---->HTTP<---->ISA<---->SSL<---->Exchange

And, it also has the option to tunnel SSL connections, like others firewalls do. (not very secure). Acting like just a port forwarding.

It is even more secure to keep confidentially end-to-end, meaning both, ISA and Exchange server, must have certificates to encrypt their connections.

Getting back to your initial request:
quote:

I want to know can I publish Exchange 2010 without certificate cause I don't want to buy any certificate .

You could use self-signed certificates (not a good practice). Just make sure to install then on both servers.

Regards,
Paulo Oliveira.



Page: [1]