RE: OWA security

["Michael Dunn" <MDunn () sscincorporated com>]

Check out isaserver.org.

You may or may not be using ISA server as your firewall, but in either case, there are several articles on 'best 
practices' for securing an IIS/OWA server.

Regards,

-Mike

-----Original Message-----
From: Beverly Kittens [mailto:beverlykittens () hotmail com]
Sent: Monday, December 15, 2003 10:32 AM
To: security-basics () securityfocus com
Subject: OWA security



Hello list

My company is currently implementing OWA to provide users with access to 
email from any Internet machine.  I'd like to see the OWA server in a DMZ, 
but this is currently up for discussion.  Sometimes operational stuff gets 
in the way of security....

Can anyone point me at a paper that describes the security implications of 
OWA, particularly the network related issues please.  I'd also be interested 
to learn the difference between OWA and POP architecture.

Thank you

_________________________________________________________________
Use MSN Messenger to send music and pics to your friends 
http://www.msn.co.uk/messenger


---------------------------------------------------------------------------
----------------------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------