Solved

How safe is it to have a hole in your firewall to the exchange OWA?

Posted on 2007-03-29
2
189 Views
Last Modified: 2010-03-06
I have users that need to access our new Exchange server 2003 web interface.

How safe is it to open our firewall to port 80 and nat it to our exchange server?

  tw
0
Comment
Question by:zonkerpro007
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 25 total points
ID: 18818059
It's only as safe as your user passwords.  Which, if your users are anything like mine, is about as safe as a kitten in a roomful of coyotes.  The recommended configuration would be to get an SSL certificate and secure the site with that.  This would provide encryption of both the passwords being sent for authentication and the actual data transfer.
0
 
LVL 104

Assisted Solution

by:Sembee
Sembee earned 25 total points
ID: 18818873
Port 80 is about as safe as having an unlocked front door. Fine until someone finds it.

I do not open port 80 on any sites that I deploy. Port 443 ONLY using a commercial SSL certificate. Then as already pointed out above, it comes down to use security - which is the usual weak point.

Simon.
0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question