RE: RPC over HTTP security

["Sarbjit Singh Gill" <ssgill () gilltechnologies com>]

Have you seen the following

Exchange Server 2003 RPC over HTTP Deployment Scenarios (includes Exchange
2003 Sp1 new features)
http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/ex2k3rpc.
mspx

Another interesting read.
http://www.winnetmag.com/MicrosoftExchangeOutlook/Article/ArticleID/40018/Mi
crosoftExchangeOutlook_40018.html

Do use Exchange 2003 Sp1 as it helps making the configuration and deployment
easier.

Are you planning to use ISA 2004 as well. Remember to put in SSL with the
HTTP. Use kerberos authentication for the RPC in the HTTPS.

/Sarbjit Gill


> -----Original Message-----
> From: sf_mail_sbm () yahoo com [mailto:sf_mail_sbm () yahoo com] 
> Sent: Wednesday, January 26, 2005 9:03 PM
> To: security-basics () securityfocus com
> Subject: RPC over HTTP security
>
>
>
> Hi List,
> We are thinking about deploying RPC over HTTP to access email 
> from the Internet
>
> Wanted to get some information on the technology and the 
> security implications of same
>
> Not much info from Microsoft's site
>
> any help would be greatly apreciated
>
> Thanks,
> Ronish