Best method for securing OWA. A frontend server, ISA, or....
Posted on 2004-10-01
I've been tasked with setting up Outlook Web Access and am unsure what is the best method for doing so. A quick overview of the system:
We are a small company with around thrity local users and fifty offsite users (Branch offices and Mobile users). Exchange 2003 is hosted on a Server 2003 box that also acts as the company work horse (DC, AV server, etc.) and is behind a Watchguard 700 Firewall. In the DMZ we have a webserver sitting there running server 2000 and initially I had planned to somehow use this for OWA but can not find a way to do so with OWA 2003. Searching through various articles on this site and others it seems that there are two schools of thought on setting up OWA, one being the use of a frontend Exchange server and the other being the use of a box running ISA. The frontend method, however, seems to be falling out of favor recently and we don't have multiple exchange boxes so I have some reservations on it.
Basically at this point I don't know what direction to turn. I want a secure option for publishing OWA to the net. I would love to be able to do this without investing anymore money in the system though, if need be, we have the resources to purchase the required components. Can anyone provide information on what method is best for doing such and why? Thanks.