Re: IIS6. Windows 2003

From: Leythos (void_at_nowhere.lan)
Date: 01/28/05


Date: Fri, 28 Jan 2005 18:24:20 GMT

In article <OH7kTcVBFHA.3524@TK2MSFTNGP15.phx.gbl>, msw@hotmail.com
says...
> Thank you for your help
>
> My website is finalize and I was just wondering if it is ok to just put it
> within the same box of the exchange.

There is no way to know based on the limited (none) information you've
provided about what the site is for/doing. If it's a site where the
users must register with their Windows user name and password, then I
would not do it, unless it's through a HTTP (SSL) port.

> From my understanding I think I need IIS to allow the access for the website
> and set it up.

If you are hosting a company website and also OWA, then you already have
IIS setup, the real question is do you have it secured.

> in reference to Exchange I think the port I am using on the Firewall is
> HTTPS is this mean that my OWA is coming through SSL or not

HTTPS is 443 or SSL for firewalls - that means that you already have OWA
setup using SSL, if you allow HTTP inbound on the same IP you could be
asking for problems.

Setup a second IP on the server nic exposed to the internet and run the
open web site from it - then create a rule in the firewall to map HTTP
to that IP.

> I hope my Q? are not sound stupid I am just trying to learn.

There are no stupid questions, at least not as long as you ask them.
 
> Thnk You very much for your replay

Have you locked down the system? Have you run the MBSA on it? Do you
have quality Anti-Virus software running on the server?

>
>
> "Leythos" <void@nowhere.lan> wrote in message
> news:MPG.1c640691292a2d2898a03a@news-server.columbus.rr.com...
> > In article <O2q2YCMBFHA.3924@TK2MSFTNGP10.phx.gbl>, msw@hotmail.com
> > says...
> >> Is it ok to setup IIS6 on the same box that have Exchange what impact
> >> that
> >> will have on security I already have a wtchguard Firwall.
> >
> > Need more info - what are you going to be doing with IIS?
> >
> > We run IIS on all our exchange servers to provide OWA through SSL. We do
> > not allow OWA via HTTP.
> >
> > In one or two instances we have permitted a static web site to run on
> > the same box as the Exchange server, but not anything that we could not
> > secure and lock-down, and at it's own IP also.
> >
> > Just make sure that you don't enable OWA through HTTP, use SSL even if
> > you need to create your own certificate.
> >
> > --
> > --
> > spamfree999@rrohio.com
> > (Remove 999 to reply to me)
>
>
>

-- 
-- 
spamfree999@rrohio.com
(Remove 999 to reply to me)


Relevant Pages

  • RE: OWA fails to close
    ... As OWA works fine with HTTP, this issue is mostly related to the SSL ... configuration. ...
    (microsoft.public.exchange.misc)
  • Re: SP2 and OWA
    ... Does SP2 necessitate SSL enforcement on FBA for OWA? ... Allowing HTTP traffic into your network is a really bad ...
    (microsoft.public.exchange.admin)
  • Re: OWA Security Question
    ... Celebrating a decade of Exchange peer support ... I enable the SSL for change password by OWA. ... Are you connecting via http or https? ...
    (microsoft.public.exchange.admin)
  • Re: SP2 and OWA
    ... Does SP2 necessitate SSL enforcement on FBA for OWA? ... Allowing HTTP traffic into your network is a really bad idea. ...
    (microsoft.public.exchange.admin)
  • Re: OWA published in ISA (SBS 2000)
    ... You don't have to be hosting a public website (other than OWA). ... access a website using SSL, your browser checks the SSL certificate for 3 ... 1) the name on the certificate matches the name of the website. ... SSL certificate on a site was not issued by a trusted publisher, ...
    (microsoft.public.backoffice.smallbiz2000)

Quantcast