Networks

Ask something
Question Locked

OWA 2007 without ISA

0 helpful
2 replies

by steve.bouse

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
What firewall ports can we open for our CAS/Outlook Web Access 2007 to reach the Ex2007 mailbox servers (CAS in DMZ)? We do have an ISA (nor Edge Transport)..and no plans for either. Any help is appreciated! Steve

2 replies

by sabotage

Existing platform:
- Exchange 2007
- No ISA server

Desired result:
- Exchange ActiveSync availability from WM6 devices (from internet). Access can be restricted by requiring a certificate
- Outlook Web access should be restricted to certain IP ranges (through VPN)

Problem:
Both Exchange ActiveSync and Outlook Web Access connect on the same IP and port. (IP of cashub server on TCP 443)

Question:
Can I prevent users from abusing the unrestricted Exchange ActiveSync ip for the purpose of webmail (which should only be available through our VPN)

This discussion is closed to new replies.