Ureader.com  
Microsoft software help and Community
   home   |   control panel login   |   archive   |  
 
Exchange
2000.active.directory
2000.admin
2000.announcements
2000.app.conversion
2000.applications
2000.clients
2000.clustering
2000.connectivity
2000.development
2000.documentation
2000.general
2000.information.store
2000.interop
2000.kms
2000.misc
2000.protocols
2000.realtime.collabo.
2000.setup
2000.transport
2000.win2000
admin
application.conversion
applications
clients
clustering
connectivity
design
development
misc
mobility
setup
tools
  
 
date: Tue, 25 Mar 2008 18:23:04 -0700,    group: microsoft.public.exchange.design        back       


Exchange Server with a Web Server Security Question   
We are a small co and I was wanting opinions on installing a new Exchange 
Server on the same hardware as our Web Server.  Mail Server and Web Server on 
the same box?
Web Server is in a DMZ so is there anything wrong with this?

I hate to buy another server if I can use utilize what we have now. else 
what is a good argument to add a seperate server just for mail?
Thanks in Advance
Tim
date: Tue, 25 Mar 2008 18:23:04 -0700   author:   Tim

Re: Exchange Server with a Web Server Security Question   
- Security is a good argument, imo. In general, you don't want to locate 
your Exchange Server in perimeter networks.
- Exchange Servers require access to Domain Controllers.
- Outlook client communication with Exchange server requires RPC 
connectivity. You can lock this down to HTTPS by using RPC over HTTP(S).

-- 
Bharat Suneja
MVP - Exchange
www.zenprise.com
NEW blog location:
exchangepedia.com/blog
----------------------------



"Tim"  wrote in message 
news:ACC837E6-9F44-4CB3-92FB-43407B8C572B@microsoft.com...
> We are a small co and I was wanting opinions on installing a new Exchange
> Server on the same hardware as our Web Server.  Mail Server and Web Server 
> on
> the same box?
> Web Server is in a DMZ so is there anything wrong with this?
>
> I hate to buy another server if I can use utilize what we have now. else
> what is a good argument to add a seperate server just for mail?
> Thanks in Advance
> Tim
date: Tue, 25 Mar 2008 18:48:24 -0700   author:   Bharat Suneja [MVP]

Re: Exchange Server with a Web Server Security Question   
You have major security risks here.
Just the holes you need to punch from the LAN to the DMZ for AD to work are 
enough to invite trouble.

Separate server on the LAN.

"Tim"  wrote in message 
news:ACC837E6-9F44-4CB3-92FB-43407B8C572B@microsoft.com...
> We are a small co and I was wanting opinions on installing a new Exchange
> Server on the same hardware as our Web Server.  Mail Server and Web Server 
> on
> the same box?
> Web Server is in a DMZ so is there anything wrong with this?
>
> I hate to buy another server if I can use utilize what we have now. else
> what is a good argument to add a seperate server just for mail?
> Thanks in Advance
> Tim
date: Tue, 25 Mar 2008 18:53:55 -0700   author:   Martin Blackstone

Re: Exchange Server with a Web Server Security Question   
As the others have mentioned separation is required for security. Also it 
depends on how much load the server is under with everything combined.

Here's a link on how to set things up for a single 2003 server.

http://www.msexchange.org/tutorials/Implementing-RPC-over-HTTPS-single-Exchange-Server-2003-environment.html



"Tim"  wrote in message 
news:ACC837E6-9F44-4CB3-92FB-43407B8C572B@microsoft.com...
> We are a small co and I was wanting opinions on installing a new Exchange
> Server on the same hardware as our Web Server.  Mail Server and Web Server 
> on
> the same box?
> Web Server is in a DMZ so is there anything wrong with this?
>
> I hate to buy another server if I can use utilize what we have now. else
> what is a good argument to add a seperate server just for mail?
> Thanks in Advance
> Tim
date: Thu, 27 Mar 2008 20:47:58 +1100   author:   Andrew Sword [MVP]

Google
 
Web ureader.com


    COPYRIGHT 2007, YARDI TECHNOLOGY LIMITED, ALL RIGHT RESERVE  |   contact us