Inbound TLS on Exchange 2003
I've a Exchange 2003 server and I want to be able to accept incoming TLS from one source. I've installed a certificate. If the sending server requires TLS, will my default SMTP VS accept TLS? Even though I don't have "require tls" enabled?
I'd like to avoid setting up multiple VS and connectors if possible, since I only need to accept incoming TLS if it's required.
I'd like to avoid setting up multiple VS and connectors if possible, since I only need to accept incoming TLS if it's required.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Well, when I want to set up TLS-required between two companies using Exchange Server 2003, what I do is I create SMTP connectors on each of the servers. One for *, with a cost of 10 (for example), and one for othercompany.com with a cost of 5. Then on THAT CONNECTOR, I require TLS. I then make sure I've got the SSL certificate installed for the SMTP virtual server. It sounds like you have that part all set, as does your business partner. Now, company A and company B will ALWAYS communicate using TLS.
Opportunistic TLS, as Mestha notes, is one of the upgrade benefits of Exchange 2007.
Opportunistic TLS, as Mestha notes, is one of the upgrade benefits of Exchange 2007.
You will need to have two SMTP virtual servers to receive email on TLS - one that has TLS enabled, one that does not. You will also need to have a valid SSL certificate on the SMTP virtual server so that the session can be established.
Simon.
Simon.
ASKER
I think i've not been clear in my circumstance. I have Exchange server A, the sender has Exchange server B. ExchB is set to only allow TLS when sending. ExchB is trying to send email to my ExchA. So as far as TLS is concerned, I'm only needing to be able to receive TLS from ExchB. I don't want to require all incoming email to ExchA be TLS.
In testing what I've found... Sending from ExchB to ExchA failed with TLS failed to connect errors. I installed a certificate on ExchA. Now ExchB can send using TLS to ExchA. I did not setup a second SMTP VS nor did I enable "require tls".
Thanks all for your input.
In testing what I've found... Sending from ExchB to ExchA failed with TLS failed to connect errors. I installed a certificate on ExchA. Now ExchB can send using TLS to ExchA. I did not setup a second SMTP VS nor did I enable "require tls".
Thanks all for your input.
ASKER
I think the confusion here is that most cases are such that TLS is set to required on the recipient side as well, so then I would have to have two SMTP VS's.