You can implement session authentication in FW1. Better than nothing.
Users have to enter 3-4 passwords but eventually they are more or less
safely in.

Amit Zinman

MCSE,

Project Manager

Professional Services Group

Getronics (Israel)

Tel: +972-3-5127306

Mobile: +972-53-570139

Email: [EMAIL PROTECTED]

 


-----Original Message-----
From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] 
Sent: Monday, October 15, 2001 2:53 PM
To: Exchange Discussions
Subject: Firewall and Exchange Ports.

Exchange 5.5 SP4

Well, we cutover our systems onto our new Cisco Network.  Servers up,
users
happy.  One problem is that users coming outside of the University can
no
longer connect to the Exchange server using Outlook unless they install
a
VPN client.  There is now a firewall and it has been locked down for
specific ports for each server for security reasons.  Ports open right
now
are 80,443,25,110,135,143,389 for Exchange.  I'm reading article Q176466
and
it states that Exchange assigns random ports for the communication with
the
directory/information store and that you may need to statically allocate
the
ports.  

I think this may be my problem.  Does anyone know the range of ports
that
are randomly assigned?  I'm not in  charge of the firewall, so bear with
me
on this.



Pete Pfefferkorn
Senior Systems Engineer/Mail Administrator
University of Cincinnati
51 Goodman Street
Cincinnati, OH  45221
Phone - (513) 556-9076
Fax -     (513) 556-2042


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to