Hello, I have a doubt. my company has a 2003 exchange on windows 2003. I want to put windows on another exchange 2003 and 2003 that also has an ISA Server 2006. I put the two on the same network segment or the front in an area DMZ? thanks Carlos
Why would you want to do that? What value would Exchange 2003 in the DMZ provide? Putting your Exchange 2003 in the DMZ provides nothing. You will have to open so many ports to the inside that your DMZ will be like Swiss cheese. The really holey kind of Swiss cheese. "Carlos" wrote in message news:eDlRIjctIHA.548@TK2MSFTNGP06.phx.gbl... > Hello, > I have a doubt. > my company has a 2003 exchange on windows 2003. I want to put windows on > another exchange 2003 and 2003 that also has an ISA Server 2006. I put the > two on the same network segment or the front in an area DMZ? > thanks > Carlos > >
which is the best solutions in my red to have 2 exchange and be protected? thanks "Martin Blackstone" escribió en el mensaje news:ujhLanctIHA.1772@TK2MSFTNGP03.phx.gbl... > Why would you want to do that? > What value would Exchange 2003 in the DMZ provide? > > Putting your Exchange 2003 in the DMZ provides nothing. You will have to > open so many ports to the inside that your DMZ will be like Swiss cheese. > The really holey kind of Swiss cheese. > > "Carlos" wrote in message > news:eDlRIjctIHA.548@TK2MSFTNGP06.phx.gbl... >> Hello, >> I have a doubt. >> my company has a 2003 exchange on windows 2003. I want to put windows on >> another exchange 2003 and 2003 that also has an ISA Server 2006. I put >> the two on the same network segment or the front in an area DMZ? >> thanks >> Carlos >> >> > >
Let me ask you a couple of questions. 1) Why do you need two Exchange servers? And why do you think you need one in the DMZ. 2) What makes you think Exchange on the LAN is not protected. Sorry to turn this around on you, but your not very clear on the goals of this exercise. "Carlos" wrote in message news:u4IqavctIHA.3780@TK2MSFTNGP03.phx.gbl... > which is the best solutions in my red to have 2 exchange and be protected? > thanks > "Martin Blackstone" escribió en el mensaje > news:ujhLanctIHA.1772@TK2MSFTNGP03.phx.gbl... >> Why would you want to do that? >> What value would Exchange 2003 in the DMZ provide? >> >> Putting your Exchange 2003 in the DMZ provides nothing. You will have to >> open so many ports to the inside that your DMZ will be like Swiss cheese. >> The really holey kind of Swiss cheese. >> >> "Carlos" wrote in message >> news:eDlRIjctIHA.548@TK2MSFTNGP06.phx.gbl... >>> Hello, >>> I have a doubt. >>> my company has a 2003 exchange on windows 2003. I want to put windows on >>> another exchange 2003 and 2003 that also has an ISA Server 2006. I put >>> the two on the same network segment or the front in an area DMZ? >>> thanks >>> Carlos >>> >>> >> >> > > >
hello, I think it is better to have 2 servers that not one. I want to put a firewall as isa, where you'll? thanks "Martin Blackstone" escribió en el mensaje news:umCk2OdtIHA.4492@TK2MSFTNGP02.phx.gbl... > Let me ask you a couple of questions. > 1) Why do you need two Exchange servers? And why do you think you need one > in the DMZ. > 2) What makes you think Exchange on the LAN is not protected. > > Sorry to turn this around on you, but your not very clear on the goals of > this exercise. > > "Carlos" wrote in message > news:u4IqavctIHA.3780@TK2MSFTNGP03.phx.gbl... >> which is the best solutions in my red to have 2 exchange and be >> protected? >> thanks >> "Martin Blackstone" escribió en el mensaje >> news:ujhLanctIHA.1772@TK2MSFTNGP03.phx.gbl... >>> Why would you want to do that? >>> What value would Exchange 2003 in the DMZ provide? >>> >>> Putting your Exchange 2003 in the DMZ provides nothing. You will have to >>> open so many ports to the inside that your DMZ will be like Swiss >>> cheese. The really holey kind of Swiss cheese. >>> >>> "Carlos" wrote in message >>> news:eDlRIjctIHA.548@TK2MSFTNGP06.phx.gbl... >>>> Hello, >>>> I have a doubt. >>>> my company has a 2003 exchange on windows 2003. I want to put windows >>>> on another exchange 2003 and 2003 that also has an ISA Server 2006. I >>>> put the two on the same network segment or the front in an area DMZ? >>>> thanks >>>> Carlos >>>> >>>> >>> >>> >> >> >> > >
"Carlos" wrote: >Hello, >I have a doubt. >my company has a 2003 exchange on windows 2003. I want to put windows on >another exchange 2003 and 2003 that also has an ISA Server 2006. I put the >two on the same network segment or the front in an area DMZ? >thanks Putting Exchange on an ISA server might be okay if you're running SBS, but otherwise it's not a good idea. If you're adding another Exchange server, what's it going to be -- a freont-end server or a backend server? If you have two back-end servers and you expect Outlook Web Access and RPC-over-HTTPS to work you're going to need a third machine to run as a front-end server. | DMZ LAN | SECURE LAN +---------+ | +-->|BE server| | | +---------+ +--------+ +-----+ | +---------+ | |Firewall|<===>| ISA |<===|===>|FE server|<--+ +--------+ +-----+ | +---------+ | | | +---------+ | +-->|BE server| +---------+ -- Rich Matheisen MCSE+I, Exchange MVP MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm Don't send mail to this address mailto:h.pott@getronics.com Or to these, either: mailto:h.pott@pinkroccade.com mailto:melvin.mcphucknuckle@getronics.com mailto:melvin.mcphucknuckle@pinkroccade.com
We done ASCII diagram! "Rich Matheisen [MVP]" wrote in message news:663n24t2eiunth8agiff7ebqtieri7oolk@4ax.com... > "Carlos" wrote: > >>Hello, >>I have a doubt. >>my company has a 2003 exchange on windows 2003. I want to put windows on >>another exchange 2003 and 2003 that also has an ISA Server 2006. I put the >>two on the same network segment or the front in an area DMZ? >>thanks > > Putting Exchange on an ISA server might be okay if you're running SBS, > but otherwise it's not a good idea. > > If you're adding another Exchange server, what's it going to be -- a > freont-end server or a backend server? If you have two back-end > servers and you expect Outlook Web Access and RPC-over-HTTPS to work > you're going to need a third machine to run as a front-end server. > > | > DMZ LAN | SECURE LAN +---------+ > | +-->|BE server| > | | +---------+ > +--------+ +-----+ | +---------+ | > |Firewall|<===>| ISA |<===|===>|FE server|<--+ > +--------+ +-----+ | +---------+ | > | | +---------+ > | +-->|BE server| > +---------+ > > -- > Rich Matheisen > MCSE+I, Exchange MVP > MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm > Don't send mail to this address mailto:h.pott@getronics.com > Or to these, either: mailto:h.pott@pinkroccade.com > mailto:melvin.mcphucknuckle@getronics.com > mailto:melvin.mcphucknuckle@pinkroccade.com
"Martin Blackstone" wrote: >We done ASCII diagram! Do I get extra credit for that? -- Rich Matheisen MCSE+I, Exchange MVP MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm Don't send mail to this address mailto:h.pott@getronics.com Or to these, either: mailto:h.pott@pinkroccade.com mailto:melvin.mcphucknuckle@getronics.com mailto:melvin.mcphucknuckle@pinkroccade.com
