Software

Ask something
Discussion Locked

OWA Security Information

0 helpful
3 replies

by pozotech

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have NT4 network with 6 servers. Running Exch 5.5 sp3 on NT 4 box w/sp4. This box has dual nic's (no IP forwarding). Have installed IIS 4.0 and OWA - all is working fine. Looking for recommendations/experience with keeping the system secure. Server is a Proliant 1600r P2/266 supporting about 80 users. Thanks Jeff

3 replies

by gkleffner

I assume the security you are asking about is in regards to OWA users from the Internet. If your Exchange mailboxes are located on the same server as IIS and OWA, you can set your Exchange (or Default Web Site) directories security to NT Challenge/Response and avoid Anonymous or Clear text authentication. If you are very concerned about someone sniffing your traffic, you can purchase and install a digital certificate with Key Manager, and require an SSL session for all communication. I am assuming that this server is only running IIS to allow for OWA, not as a general Web server. The specific steps would take too long to type, but you can find lots of info by searching TechNet using key words. Another benefit of using a Digital Certificate/SSL is OWA users will be able to change their NT password. One other thing, be aware that each OWA session consumes resources on the server. If you have too many concurrent sessions, the server may start dogging.

by pozotech

Thanks for the response. I have installed NT challenge/response, disabled anonymous and clear text. Looking for responses from users that do not use SSL. Thanks and as usual tech net is full of information.

This discussion is closed to new replies.