Comments on: Where should my Exchange server reside on my network? http://itknowledgeexchange.techtarget.com/itanswers/where-should-my-exchange-server-reside-on-my-network/ Wed, 19 Jun 2013 19:19:38 +0000 hourly 1 By: ramseyb http://itknowledgeexchange.techtarget.com/itanswers/where-should-my-exchange-server-reside-on-my-network/#comment-92637 ramseyb Wed, 25 May 2011 20:56:40 +0000 #comment-92637 In agreement with all them. Behind Firewall and Gateway.

]]> By: mrdenny http://itknowledgeexchange.techtarget.com/itanswers/where-should-my-exchange-server-reside-on-my-network/#comment-91813 mrdenny Wed, 04 May 2011 18:17:30 +0000 #comment-91813 Exchange isn’t configured like a normal server solution. There are three sets of servers that you need to place. Two go within your internal network, and one goes in your DNS. The mailbox servers and the hub transport servers both go within your internal network. The external hub transport servers go in your DNS with just a couple of firewall holes opened between them and your hub transport servers. If you want OWA those are a bit harder as they need to be accessible from Internet but still have access to a domain controller. Only access to port 443 (and port 80 if you want) is needed for the client access servers which host OWA.

]]> By: gabe9527 http://itknowledgeexchange.techtarget.com/itanswers/where-should-my-exchange-server-reside-on-my-network/#comment-91802 gabe9527 Wed, 04 May 2011 15:01:00 +0000 #comment-91802 For ease of access to your users – internal to your network (with SMTP routing Gateway in the DMZ) this would be the best approach but not normally acceptable. This will no doubt come down to what can be signed off by the company. Please remember that the ports to this server will still need to have the same restrictions in the DMZ as it would internally…. Also the same relay restrictions and access would have to be enforced. So if the exchange server can relay in the DMZ it will be able to relay in the DMZ.

Just somethng to think about.

]]> By: yasirirfan http://itknowledgeexchange.techtarget.com/itanswers/where-should-my-exchange-server-reside-on-my-network/#comment-91794 yasirirfan Wed, 04 May 2011 08:55:47 +0000 #comment-91794 The best practice is to keep all your Servers which are providing internet sevices either Exchange or Web or ISA should be in DMZ zone, first and foremost they are much secured and you can open the required ports in firewall.

Cheers

Yasir

]]>