I want to secure OWA

i need to secure Exchange 2016 OWA via a reverse proxy. Is there anyone doing this and what appliance are you using/recommend
Barry-f4Asked:
Who is Participating?
 
Blue Street TechLast KnightCommented:
NSA3600 is a great firewall. Make sure you harden it and procure AGSS (Advanced Gateway Security Suite) so you can protect the network properly, especially configuring CAPTURE ATP, Server DPI-SSL for your public facing services such as OWA, etc. and Client DPI-SSL for all your client machines.
0
 
Blue Street TechLast KnightCommented:
Hi Barry,

Yes, you can do this all day long and they are very effective! We use Microsoft IIS by using ARR (Application Request Routing) and URL Rewrite Module. With both you can implement complex and flexible load balancing and reverse proxy configurations.

Here is a good guide: https://blogs.technet.microsoft.com/exchange/2013/07/19/part-1-reverse-proxy-for-exchange-server-2013-using-iis-arr/

Let me know if you have any questions!
0
 
Barry-f4Author Commented:
Is this an appliance?
0
Get Certified for a Job in Cybersecurity

Want an exciting career in an emerging field? Earn your MS in Cybersecurity and get certified in ethical hacking or computer forensic investigation. WGU’s MSCSIA degree program was designed to meet the most recent U.S. Department of Homeland Security (DHS) and NSA guidelines.  

 
Blue Street TechLast KnightCommented:
No, it's a Windows Server role. You'd preferably run in on its own instance either a physical box or a virtual machine and it should be in the DMZ.
0
 
Barry-f4Author Commented:
We are more inclined to go with a hardened appliance
0
 
Blue Street TechLast KnightCommented:
to do load-balancing or just act as a RPS? Your hardened appliance should be, first and foremost, your firewall; preferably a NGFW (Next-Generation Firewall). What's the make/model of your firewall?

You can load-balance from your firewall if its a NGFW or from a network appliance but you will lose the granular capabilities of IIS ARR plus you can do much more with IIS ARR than just a load-balancer would.

Here is some more info ARR: on https://www.iis.net/downloads/microsoft/application-request-routing
0
 
Barry-f4Author Commented:
We just want to do reverse proxy no load balancing. Firewall is an NSA 3600
0
 
Barry-f4Author Commented:
We are going with barracuda it is already in house thanks
0
 
Barry-f4Author Commented:
We are going with barracuda as it is already in house
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.