We have a small domain and not a lot of money. Should we pay the extra money to buy a Client Access Server to put in the DMZ to allow users to access OWA externally and PDA uses to connect to their mailboxes? If so, are there online instructions somewhere detailing this process of setting up such a server in the DMZ? Or is it possible using SSL and a certificate to safely protect our Exchange server while still having the internal CAS accessed directly from the internet? By the way, our Client Access Server has other roles beyond CAS.