That would be a better solution, "best" is subject to some debate. Simply
using SSL for all of the protocols in question would likely be better as
well.

On 2/22/03 10:52, "Ryan Finnesey" <[EMAIL PROTECTED]> wrote:



Would the best solution be to use a ISA Box and also a PIX? 


Ryan, 


-----Original Message----- 
From: Patrick R. Sweeney [mailto:[EMAIL PROTECTED] 
Sent: Saturday, February 22, 2003 12:39 AM 
To: Exchange Discussions 
Subject: Re: Exchange 2000 OWA & Cisco PIX 515 

It will take the hacker five, maybe six seconds longer to run a port 
scan. 


-Patrick R. Sweeney 
http://boston.craigslist.org/bos/res/8484283.html 
----- Original Message ----- 
From: "Ely, Don" <[EMAIL PROTECTED]> 
To: "Exchange Discussions" <[EMAIL PROTECTED]> 
Sent: Friday, February 21, 2003 7:35 PM 
Subject: RE: Exchange 2000 OWA & Cisco PIX 515 


> The PIX will do what you want, but what's the use... 
> 
> -----Original Message----- 
> From: Pillai, Raj [mailto:[EMAIL PROTECTED] 
> Sent: Friday, February 21, 2003 10:34 AM 
> To: Exchange Discussions 
> Subject: Exchange 2000 OWA & Cisco PIX 515 
> 
> 
> 
> Hello Everyone, 
> 
> Here is a scenario: 
> 
> Exchange 2000 FE and BE configuration behind a PIX 515 firewall. FE 
Server 
> is just for OWA, so that External users can access their email 
offsite. It 
> works perfectly with the necessary ports enabled( 
80,443,143,993).However, 
> it is not desirable to leave 80 accessible due to potential security 
risk. 
> My long-term solution is an ISA Server in the DMZ. 
> In the interim, is there a way to configure the PIX 515 for Port 
address 
> translation? I am speculating that on the PIX we can assign a 
different 
port 
> number( e.g. port 8800..any port)and let the PIX 
resolve/translate/forward 
> all requests to Port 80. My Network Administrator does not think the 
PIX 
515 
> is compliant. Is there anyone in this group who has a similar 
environment? 
> 
> Thanks and happy Friday! 
> 



_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to