er. yes, but you can use https for that (anyone know of a free cert
provider?).

The point was that it sounded like the guy wanted to 'hide' his OWA
implementation, and this is one way of doing so.

Keith.

> -----Original Message-----
> From: Chris Scharff [mailto:[EMAIL PROTECTED]
> Sent: 24 February 2003 15:02
> To: Exchange Discussions
> Subject: Re: Exchange 2000 OWA & Cisco PIX 515
> 
> 
> Like the usernames and passwords wouldn't still be sent in 
> plain text. lol
> 
> On 2/24/03 1:05, "Keith Hall" <[EMAIL PROTECTED]> wrote:
> 
> 
> 
> One option regardless of port mapping is to hide the exchange 
> access deep 
> down in some cryptic folder structure, to access you then 
> have a url like 
> http://ipaddress/xkjJ4w9lqj4xp/j295hF6KJpwqz/lo5Jd9balvq3X/exc
> hange, and 
> turn OFF directory listing... I think the exchange OWA 
> scripts need changing
> 
> but it should work and this is one method I've thought of for 
> 'hiding' an 
> OWA instance. 
> 
> Of course it's almost useless if you don't have the URL to 
> click on in the 
> first place, which probably 99% of the time people will use 
> OWA from a 
> public machine! You could use an easier folder path to 
> remember, but is less secure... YMMV 
> 
> Rgds, 
> 
> Keith. 
> 
> > -----Original Message----- 
> > From: Ely, Don [mailto:[EMAIL PROTECTED] 
> > Sent: 22 February 2003 00:36 
> > To: Exchange Discussions 
> > Subject: RE: Exchange 2000 OWA & Cisco PIX 515 
> > 
> > 
> > The PIX will do what you want, but what's the use... 
> > 
> > -----Original Message----- 
> > From: Pillai, Raj [mailto:[EMAIL PROTECTED] 
> > Sent: Friday, February 21, 2003 10:34 AM 
> > To: Exchange Discussions 
> > Subject: Exchange 2000 OWA & Cisco PIX 515 
> > 
> > 
> > 
> > Hello Everyone, 
> > 
> > Here is a scenario: 
> > 
> > Exchange 2000 FE and BE configuration behind a PIX 515 
> > firewall. FE Server 
> > is just for OWA, so that External users can access their 
> > email offsite. It 
> > works perfectly with the necessary ports enabled( 
> > 80,443,143,993).However, 
> > it is not desirable to leave 80 accessible due to potential 
> > security risk. 
> > My long-term solution is an ISA Server in the DMZ. 
> > In the interim, is there a way to configure the PIX 515 for 
> > Port address 
> > translation? I am speculating that on the PIX we can assign a 
> > different port 
> > number( e.g. port 8800..any port)and let the PIX 
> > resolve/translate/forward 
> > all requests to Port 80. My Network Administrator does not 
> > think the PIX 515 
> > is compliant. Is there anyone in this group who has a similar 
> > environment? 
> > 
> > Thanks and happy Friday! 
> > 
> > Raj 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to