Microsoft's Certificate server is free, assuming one already owns the OS,
which you do if you are running Exchange. Looking back through his original
post he was discussing mapping port 80 to port 8080 because he thought
(correctly) that port 80 is a pretty insecure way to do OWA. 

On 2/24/03 9:52, "Keith Hall" <[EMAIL PROTECTED]> wrote:



er. yes, but you can use https for that (anyone know of a free cert 
provider?). 

The point was that it sounded like the guy wanted to 'hide' his OWA 
implementation, and this is one way of doing so. 

Keith. 

> -----Original Message----- 
> From: Chris Scharff [mailto:[EMAIL PROTECTED] 
> Sent: 24 February 2003 15:02 
> To: Exchange Discussions 
> Subject: Re: Exchange 2000 OWA & Cisco PIX 515 
> 
> 
> Like the usernames and passwords wouldn't still be sent in 
> plain text. lol 
> 
> On 2/24/03 1:05, "Keith Hall" <[EMAIL PROTECTED]> wrote: 
> 
> 
> 
> One option regardless of port mapping is to hide the exchange 
> access deep 
> down in some cryptic folder structure, to access you then 
> have a url like 
> http://ipaddress/xkjJ4w9lqj4xp/j295hF6KJpwqz/lo5Jd9balvq3X/exc 
> hange, and 
> turn OFF directory listing... I think the exchange OWA 
> scripts need changing 
> 
> but it should work and this is one method I've thought of for 
> 'hiding' an 
> OWA instance. 
> 
> Of course it's almost useless if you don't have the URL to 
> click on in the 
> first place, which probably 99% of the time people will use 
> OWA from a 
> public machine! You could use an easier folder path to 
> remember, but is less secure... YMMV 
> 
> Rgds, 
> 
> Keith. 
> 
> > -----Original Message----- 
> > From: Ely, Don [mailto:[EMAIL PROTECTED] 
> > Sent: 22 February 2003 00:36 
> > To: Exchange Discussions 
> > Subject: RE: Exchange 2000 OWA & Cisco PIX 515 
> > 
> > 
> > The PIX will do what you want, but what's the use... 
> > 
> > -----Original Message----- 
> > From: Pillai, Raj [mailto:[EMAIL PROTECTED] 
> > Sent: Friday, February 21, 2003 10:34 AM 
> > To: Exchange Discussions 
> > Subject: Exchange 2000 OWA & Cisco PIX 515 
> > 
> > 
> > 
> > Hello Everyone, 
> > 
> > Here is a scenario: 
> > 
> > Exchange 2000 FE and BE configuration behind a PIX 515 
> > firewall. FE Server 
> > is just for OWA, so that External users can access their 
> > email offsite. It 
> > works perfectly with the necessary ports enabled( 
> > 80,443,143,993).However, 
> > it is not desirable to leave 80 accessible due to potential 
> > security risk. 
> > My long-term solution is an ISA Server in the DMZ. 
> > In the interim, is there a way to configure the PIX 515 for 
> > Port address 
> > translation? I am speculating that on the PIX we can assign a 
> > different port 
> > number( e.g. port 8800..any port)and let the PIX 
> > resolve/translate/forward 
> > all requests to Port 80. My Network Administrator does not 
> > think the PIX 515 
> > is compliant. Is there anyone in this group who has a similar 
> > environment? 
> > 
> > Thanks and happy Friday! 
> > 
> > Raj 



_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to