Oops...  RPC over HTTPS!

Ed Crowley MCSE+Internet MVP
Freelance E-Mail Philosopher
Protecting the world from PSTs and Bricked Backups!T

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ed
Crowley [MVP]
Sent: Tuesday, September 05, 2006 12:30 PM
To: Exchange Discussions
Subject: RE: OWA Pros & Cons

And then deploy HTTPS over RPC! 

Ed Crowley MCSE+Internet MVP
Freelance E-Mail Philosopher
Protecting the world from PSTs and Bricked Backups!T

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Evan Mann
Sent: Tuesday, September 05, 2006 10:13 AM
To: Exchange Discussions
Subject: RE: OWA Pros & Cons

You already run everything you need to publish OWA and RPC over HTTP
securely.  You can find step-by-step guides on msexchange.org and
isaserver.org.  After you have your SSL cert, I suspect it will take you 30
minutes or LESS to get OWA and RPC over HTTP setup and working properly, and
in a highly secured fashion.

IMO, you need to get with the times.  

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Michael
Henry
Sent: Tuesday, September 05, 2006 12:52 PM
To: Exchange Discussions
Subject: OWA Pros & Cons

Up until now, I have simply co-delivered mail for temporary "On the Road"
Access.

I have looked over OWA, to me it seems, it's not worth the effort.
Well, I have a salesman who has believe the sales pitch they have received
concerning a PDA, that can work with OWA.  Beyond that, most of these people
have laptops with VPN into our domain.  So it's huge waste for such little
benefits being duplicated.  But I am falling prey to convenience of web
access to solve "lack of planning" issues.

But my problem is it's getting into the realm of what are my risks (security
or otherwise) for such benefits?

What are my setup options to make this as secure as possible?

Has anyone been hacked through their OWA?

Is there a definitive web page on all the reasons not to use OWA?  ( My
viewpoint is being questioned.  No one will remember, I told them not to do
this, if/when we fall prey to the Microsoft's Security Competency. )

We run E2K3 on W2K3 server, with a ISA2K4 on another W2K3 server for access
setup.

Regards,  Michael

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.




_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.




_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Reply via email to