I have a site which requires to be PCI compliant.
It contains an SBS2003 server providing DC / Exchange OWA / File and Print. THere is no DMZ.
Due to OWA it looks like it requires to be located in a DMZ, I would be grateful if any one with experience of above could assist.
Does that sound right? are there issues with placeing an SBS 2003 server in a DMZ? does SBS2003 blow the one function per server rule for PCI compliance?