Mark, In scenario 2 will your SMTP server in the DMZ subnet be part of the Exchange organization? If so the whole DMZ thing isn't really going to get you much if anything. Personally I think DMZs are outdated and not a good model anymore.
I would go with option 1. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:ActiveDir- > [EMAIL PROTECTED] On Behalf Of Mark Parris > Sent: Tuesday, December 05, 2006 11:42 AM > To: ActiveDir.org > Subject: [ActiveDir] OT: Exchange Design Question > > A friend of mine has asked me to ask the group the following Exchange > related question. > > An Exchange 2003 environment that has been upgraded from Exchange 2000 > needs to have SMTP reconfigured for outbound mail. There are two > proposals on the table but they are not sure of the best approach. > > 1 Exchange Frontend/Backend configuration with both servers on the > internal network and an ISA server in the perimeter network publishing > internal SMTP to the internet or in this case messagelabs > > or > > 2 Exchange Frontend/Backend configuration with both servers on the > internal network and an SMTP server in the DMZ relaying to messagelabs > > Messagelabs host the MX records and cleanses most viruses out of the > emails but may change in the future though there is no current > managment thinking to do so. > > Given these two scenarios which one would most people choose and if so > why? > > The environment is approx 2000 users and there are eight sites and the > chosen SMTP configuration will be repeated in another site for > resilience. > > Many thanks as always, > > > > > Regards, > > Mark Parris > > Base IT Ltd > Active Directory Consultancy > Tel +44(0)7801 690596 > .+Šw†ÛÿüÁ§Š÷Šºƒò²Ö§²ÑB§ÿö+v*®ŠË§²Örz§ÿà > ŠVryÊý§Š÷Š¹ŠV¶+v*
