RE: [fw-wiz] PIX -> ISA -> OWA Configuration

From: Sanford Reed (sanford.reed_at_cox.net)
Date: 05/02/05

  • Next message: Paul Melson: "RE: [fw-wiz] PIX -> ISA -> OWA Configuration"
    To: "'Jason Gomes'" <greyline@phreaker.net>, <firewall-wizards@honor.icsalabs.com>
    Date: Mon, 2 May 2005 17:00:31 -0400
    
    

    Per MS (Using Microsoft Exchange 2000 Front-End Servers.pdf - available from
    MS TechNet) it is configuration 1).

    -----Original Message-----
    From: firewall-wizards-admin@honor.icsalabs.com
    [mailto:firewall-wizards-admin@honor.icsalabs.com] On Behalf Of Jason Gomes
    Sent: Sunday, May 01, 2005 2:14 AM
    To: firewall-wizards@honor.icsalabs.com
    Subject: [fw-wiz] PIX -> ISA -> OWA Configuration

    What is the preferred placement for a OWA front-end server given these
    two possible network configurations and why?

    1) [Internet] <==> [PIX Firewall] <==> [ISA Proxy] <==> [PIX Firewall]
    <==> [OWA] <==> [Internal Net w/Exchange Svr]

    2) [Internet] <==> [PIX Firewall] <==> [ISA Proxy] <==> [OWA] <==> [PIX
    Firewall] <==> [Internal Net w/Exchange Svr]

    Notes:
    The ISA server is performing a reverse proxy for HTTPS connections.
    In #1, the backend firewall will only allow port 443 through to OWA.
    In #2, all ports required for OWA to communicate with the internal
    exchange server is allowed.
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


  • Next message: Paul Melson: "RE: [fw-wiz] PIX -> ISA -> OWA Configuration"