Exchange 2016 Question

timgreen7077 used Ask the Experts™
Wondering what you experts think about this question:
Setup will be
2 Sites (Primary (Active) and Secondary(Passive in name only))
Single Unbound name space for services (
1 DAG extending sites 1 and 2
3 Servers in primary and 3 servers in secondary
4 CPUs and 24 GB of RAM for all servers
1000 users maybe a few less
SentMsgs     : 11578 a day
RcvdMsgs     : 51517 a day

So question is this, I'm trying to avoid using a Citrix Netscaler to load balance inbound emails between servers because we don't really have any expertise in house for the device. So it seems that the firewall will need to point to 1 of the Exchange servers in each site to send all inbound mail, and allow the native load balancing and HA of the transport service to move the mail around internally. My question is what do you think about allowing all mail to come to 1 server since I want to avoid the Netscaler? Based on the amount of sent and received emails do you think the server would be able to handle this email traffic. What do you guys think? Open to suggestions or other options.
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Lead email system administrator
It is ok, Exchange knows perfect what to do with email, loadbalancer is needed for client connections mostly.
Tim EdwardsIT Team Lead - Unified Communications & Collaboration
What type of SpamFirewall are you using? in my environment I have all 8 servers listed on the Spamfirewall, so when I am doing maintenance I do not need to manually go in change the settings everytime.
timgreen7077Exchange Engineer
Distinguished Expert 2018


I will be using Forcepoint for inbound spam and virus hygiene. This will be a hosted service. Is you Spamfirewall outside your network and if so, did yo list 8 public IPs and how long is failover if it detects 1 or 2 of the IPs are offline and can't be reached?
Tim EdwardsIT Team Lead - Unified Communications & Collaboration
I have 2 SpamFirewalls sitting in my DMZ each a public routable IP, 18 MXrecords pointing to the 2 IP's with different priorities in the event 1 is down the other is available.

On the inside SMTP interface of the SpamFirewall I list all 8 internal IP address. When I put 1 server in dagmaintenance incoming mail immediately goes to the next available IP.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial