Solved

Securing OWA

Posted on 2013-05-13
1
283 Views
Last Modified: 2013-05-28
I have a number of clients (10-75 users) running Exchange 2003, 2007 and 2010 with a single server managing all the roles.

This includes an open port 80/443 redirected to IIS/OWA on the single Exchange Server.

I would like to increase the security to make OWA/ActiveSync less vulnerable to outside attack.  

What are the best methods for locking down or breaking out these functions without spending a pile of money.

Thanks,

Nathan
0
Comment
Question by:NEMC
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
ID: 39161348
Turn off port 80 access, install a commercial SSL certificate, enforce secure password options.

Unfortuantely the best way to secure the server isn't available to you - that is get rid of the users, they are the most vulnerable part of the installation.

Anything else is going to cost - as you would be looking at deploying TMG or something like that.

Simon.
0

Featured Post

Space-Age Communications Transitions to DevOps

ViaSat, a global provider of satellite and wireless communications, securely connects businesses, governments, and organizations to the Internet. Learn how ViaSat’s Network Solutions Engineer, drove the transition from a traditional network support to a DevOps-centric model.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Exchange server Error 3 42
office 365 5 41
Exchange 2013 database automatically getting mounted on another DAG node 5 48
Outlook Outbox Messages in Exchange 4 28
Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
A phishing scam that claims a recipient’s credit card details have been “suspended” is the latest trend in spoof emails.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question