Re: Sharepoint servers and Exchange servers

["Cheek, Leigh" <lcheek () UTK EDU>]

Shane,

I agree and appreciate your input. 


Thanks, 
Leigh Cheek
(865) 974-4420

-----Original Message-----
From: Shane Bishop [mailto:shanebishop () JALC EDU] 
Sent: Wednesday, February 06, 2008 8:19 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Sharepoint servers and Exchange servers

Both of these technologies have the option to utilize front end servers
for authentication and authorization to the backend services. You can
put your front end servers in a different zone than your backend
services which would mitigate the chances of a security incident.
Instead of configuring the firewall around the services, accommodate
your current security architecture by putting the front end servers and
users an arm's distance away from the Sharepoint SSP's and exchange
mailbox stores.     

Shane Bishop
Associate Director of Network Infrastructure John A. Logan College CISM,
CISSP http://shanebishop.info
(618) 985-3741 Ext. 8544


________________________________

From: Cheek, Leigh [mailto:lcheek () UTK EDU]
Sent: Wed 2/6/2008 3:29 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Sharepoint servers and Exchange servers



Is having Sharepoint servers and Exchange servers in the same firewall
zone a wise security choice?  Because the access level will be different
for those two types of systems, I am of the opinion that you would be
unnecessarily opening your Exchange servers to greater risk. What do you
think? What other risks or advantages do you see to being in the same
zone?

Thanks,
Leigh Cheek, CIA, CISA
Auditor
Audit and Consulting Services
University of Tennessee
149 Conference Center Building
Knoxville, TN 37996-4114
(865) 974-4420
fax (865) 974-6171
lcheek () utk edu