Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Need to Secure my internet facing CAS server

Posted on 2011-09-16
2
286 Views
Last Modified: 2012-05-12
hi,

We have an exchange 2010 architecture that contains a site A and a site B. Site A is internet facing behind a firewall and we need to secure the CAS server from an IIS perspective because the default IIs page is showing when you try and access the site without the /owa at the end.
Could anyone please assist with this process
0
Comment
Question by:ablsysadmin
2 Comments
 
LVL 6

Accepted Solution

by:
netjgrnaut earned 500 total points
ID: 36549140
Not sure this is really a question of "securing" the IIS server.  Either you're allowing traffic on TCP 80/443, or not.  If you're running OWA on this box, you are.  If you're not running any other custom content on the IIS server, then it will be as secure as OWA can be - so long as you keep your updates current.

From a security perspective, don't run additional sites (especially apps) on the OWA server.  Don't install custom web components, either - just run what Exchange installed to support OWA.

As for the default IIS page, you might write a page that redirects incoming traffic to /owa - preferably using https.  You need only put actual content on the default web root to make the default IIS page go away.

Example default.aspx:
<%@ Page Language="C#" %> 
<script runat="server"> 
  protected override void OnLoad(EventArgs e) 
  { 
      Response.Redirect("https://[YourServerName.somewhere.com/owa"); 
      base.OnLoad(e); 
  } 
</script> 

Open in new window


Or default.html:
<head>
<meta HTTP-EQUIV="REFRESH" content="0; url=https://[YourServerName.somewhere.com/owa"> 
</head>

Open in new window


Hope that helps!
0
 

Author Comment

by:ablsysadmin
ID: 36590615
thanks, will give it a try asap and report back
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question