Should the OWA & ActiveSync Client Access Server be installed in the DMZ or can the internal CAS be safely accessed directly

60 pts.
Tags:
ActiveSync
Client Access Server Role
DMZ
Exchange 2007
Outlook
Outlook Web Access
OWA
SSL
We have a small domain and not a lot of money. Should we pay the extra money to buy a Client Access Server to put in the DMZ to allow users to access OWA externally and PDA uses to connect to their mailboxes? If so, are there online instructions somewhere detailing this process of setting up such a server in the DMZ? Or is it possible using SSL and a certificate to safely protect our Exchange server while still having the internal CAS accessed directly from the internet? By the way, our Client Access Server has other roles beyond CAS.
ASKED: March 25, 2009  12:01 AM
UPDATED: March 25, 2009  2:26 PM

Answer Wiki

Thanks. We'll let you know when a new response is added.

As long as you put a certificate on your CAS you can allow access from the internet safely without having to put it in the DMZ. That is the exact configuration our CAS is set up with. Here is an excellent article on <a href=”http://blog.aaronmarks.com/?p=40″>SSL and Exchange 2007</a>. We have three CAS/Hub combo servers all with ssl certs and none are in the DMZ.

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following