I want to secure OWA

i need to secure Exchange 2016 OWA via a reverse proxy. Is there anyone doing this and what appliance are you using/recommend
Barry-f4Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Blue Street TechLast KnightCommented:
Hi Barry,

Yes, you can do this all day long and they are very effective! We use Microsoft IIS by using ARR (Application Request Routing) and URL Rewrite Module. With both you can implement complex and flexible load balancing and reverse proxy configurations.

Here is a good guide: https://blogs.technet.microsoft.com/exchange/2013/07/19/part-1-reverse-proxy-for-exchange-server-2013-using-iis-arr/

Let me know if you have any questions!
0
Barry-f4Author Commented:
Is this an appliance?
0
Blue Street TechLast KnightCommented:
No, it's a Windows Server role. You'd preferably run in on its own instance either a physical box or a virtual machine and it should be in the DMZ.
0
Challenges in Government Cyber Security

Has cyber security been a challenge in your government organization? Are you looking to improve your government's network security? Learn more about how to improve your government organization's security by viewing our on-demand webinar!

Barry-f4Author Commented:
We are more inclined to go with a hardened appliance
0
Blue Street TechLast KnightCommented:
to do load-balancing or just act as a RPS? Your hardened appliance should be, first and foremost, your firewall; preferably a NGFW (Next-Generation Firewall). What's the make/model of your firewall?

You can load-balance from your firewall if its a NGFW or from a network appliance but you will lose the granular capabilities of IIS ARR plus you can do much more with IIS ARR than just a load-balancer would.

Here is some more info ARR: on https://www.iis.net/downloads/microsoft/application-request-routing
0
Barry-f4Author Commented:
We just want to do reverse proxy no load balancing. Firewall is an NSA 3600
0
Blue Street TechLast KnightCommented:
NSA3600 is a great firewall. Make sure you harden it and procure AGSS (Advanced Gateway Security Suite) so you can protect the network properly, especially configuring CAPTURE ATP, Server DPI-SSL for your public facing services such as OWA, etc. and Client DPI-SSL for all your client machines.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Barry-f4Author Commented:
We are going with barracuda it is already in house thanks
0
Barry-f4Author Commented:
We are going with barracuda as it is already in house
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Encryption

From novice to tech pro — start learning today.