Re: ISA firewall for exchange

["Miller, Don C." <donm () UIDAHO EDU>]

Gary, we treat all clients as untrusted and require RPC over HTTPS
(Outlook Anywhere) for everyone.  This allowed us to only provide access
to HTTPS from any location which was required for Outlook Web Access
anyway.  All other traffic is blocked via ACLs and firewall techniques.

Don Miller
University of Idaho

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Gary Flynn
Sent: Wednesday, February 18, 2009 6:36 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] ISA firewall for exchange


We're getting ready to bring up Exchange and all Microsoft's
documentation recommends protecting it from direct Internet
exposure with ISA or a similar application firewall.

Thoughts?


-- 
Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security