OWA Configuration:
I am trying to configure OWA and wanted to know if below is a security risk on the firewall:
I have a public IP address which users will use to access OWA, therefore on the firewall I will have the following configuration:
access-list incoming 10 permit tcp any host (public_IP) eq https (this is set on the outside interface)
NEXT:
static (inside, outside) (Public_IP) (Exchange IP) MASK
Also, because you are allowing Domain Users to authenticate on a public address, you should have a good internal security policy in place regarding logins and password length and complexity.