Our company is small company with some web developers going on to clients place, few of web developers need to have access to there Exchange Mailbox as currently using webmail, so i want to setup OWA on my exchange server so that they can access there exchange mailboxes from clients place.
Our company has an Exchange Server with PIX Firewall 515E, So just let me know the Steps as i m setting up OWA for the first time.i m preety much new to PIX, i have 5 public IPs and i m not able to ping to any ip from outside, so Please go through the PIX config and let me know what all things i can do to protect my network.
Below are my PIX Details
PIX Version 6.3(3)
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 intf2 security10
hostname PIX
domain-name domain.com
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
name 192.x.x.x Webserver
access-list outside_access_dmz permit icmp any any
access-list outside_access_dmz permit tcp host Webserver any
access-list outside_access_dmz permit udp host Webserver any eq domain
access-list outside_access_dmz permit tcp host Webserver any eq 1433
access-list outside_access_dmz permit udp host Webserver any eq 1434
access-list outside_access_dmz permit tcp host Webserver any eq 135
access-list outside_access_dmz deny ip any any
access-list outside_access_in permit tcp any host 213.x.x.x eq www
access-list outside_access_in permit icmp any any
access-list outside_access_in permit tcp any host 213.x.x.x eq domain
access-list outside_access_in permit tcp any host 213.x.x.x eq 1433
access-list outside_access_in permit tcp any host 213.x.x.x eq 135
access-list outside_access_in deny ip any any
pager lines 24
mtu outside 1500
mtu inside 1500
mtu intf2 1500
ip address outside 213.x.x.x 255.255.255.248
ip address inside 192.x.x.x 255.255.255.0
ip address intf2 192.x.x.x 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
pdm history enable
arp timeout 14400
global (outside) 1 213.x.x.x
global (intf2) 1 192.x.x.x-192.x.x.x
nat (inside) 1 192.x.x.x 255.255.255.0 0 0
nat (intf2) 1 192.x.x.x 255.255.255.0 0 0
static (intf2,outside) 213.x.x.x Webserver netmask 255.255.255.255 0 0
access-group outside_access_in in interface outside
access-group outside_access_dmz in interface intf2
route outside 0.0.0.0 0.0.0.0 213.x.x.x 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
http server enable
http 192.x.x.x 255.255.255.255 inside
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
telnet 192.x.x.x 255.255.255.0 inside
telnet timeout 5
ssh timeout 5
console timeout 0
terminal width 80
Cryptochecksum:1e3e9b6db81
a8f742e88b
32a5daea40
1
: end
Start Free Trial
