Avatar of FJMONTANA
FJMONTANA
Flag for United States of America asked on

SMTP via TLS

I need to allow one vendor to send email from their MS Exchange server to our MS Exchange 2003 server via TLS, but I’m confused as to what needs to be done…

From reading on this site and others, I see that Exchange 2003 doesn’t allow Opportunistic TLS.  All indications point to setting up an additional SMTP VS and another routing connector.  But because of our current configuration, I’m not sure how best to proceed…

Exchange 2003 is behind Forefront TMG 2010 server that has port 25 open.  On the TMG server, Trend Micro InterScan VirusWall 7 listens on port 25.  It does first level spam filtering, prevents relaying, etc…

TM Interscan VirusWall forwards mail to an internal SMTP virtual server “SERVER-A” running GFI Mail Essential…  Here we do additional spam checking…  From here, mail is passed to the MS Exchange server for delivery….

We have one SMTP VS and one connector on MS Exchange.  The connector passes all external mail back to  SERVER-A for spam checking, adds our company disclaimer and then sends it to the TMG Server where the TM Interscan VirusWall handles sending it out….

Given this scenario, what would be the best way to set up TLS?  Could I just install the certificate on the Forefront TMG server or does it actually have to go on SERVER-A, the mail server or both?  

Thanks very much for your input…
Microsoft Forefront ISA ServerExchangeEncryption

Avatar of undefined
Last Comment
FJMONTANA

8/22/2022 - Mon
Jamie McKillop

Hello,

Do you need TLS inbound and outbound or just inbound? On inbound connections, the TLS connection would be made between the sending server and your Trend Micro InterScan VirusWall server. You will need to contact Trend Micro and find out how to configure TLS on their product. For outbound mail, your GFI server would need to be setup to do TLS with your vendor. You will ned to contact GFI to determine how to setup TLS with their product. So, there is nothing to configure in Exchange.

JJ
ASKER CERTIFIED SOLUTION
FJMONTANA

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
FJMONTANA

ASKER
It took care of the issue
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck