RE: Exchange Server and External Access

["Depp, Dennis M." <deppdm () ornl gov>]

Set up and install OWA on your box.  Require either https or Microsoft authentication.  Open port 443 (https) or 80 in 
the firewall. This isn't the most secure solution but it maybe adequate for a small company.

Denny

-----Original Message-----
    From: "Cherian M. Palayoor" <cpalayoor () cwalkergroup com>
    Sent: 8/22/03 3:03:18 PM
    To: "security-basics () securityfocus com" <security-basics () securityfocus com>
    Subject: Exchange Server and External Access
    
    Hi,
    
    We presently use the Std edition of Exchange 2000 as a mail server for our
    internal users, behind the Firewall.
    
    However we would like to grant mailbox access to external users outside the
    Firewall.
    
    What would be the most secure and efficient method of accomplishing this. 
    
    One stream of thought that I have been entertaining is having a separate
    Exchange/Mail  Server on the DMZ.
    
    Now this solution would result in having to maintain 2 separate mailboxes for
    internal and external users. This creates problems for users who would access
    their emails from both inside and outside the office.
    
    How can I workaround this problem.
    
    Thanks in advance for any suggestions.
    
    Regards
    
    CP
    
    
     Scanned by Webshield E250
    
    
    
    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    
    


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
technical IT security event.  Modeled after the famous Black Hat event in
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------