OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Uwe Lüthy (uwe.luethytrivadis.com)
Date: Thu May 17 2001 - 05:38:48 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    In the attechment you can find a white paper. Also you can try the
    following link:
    http://www.microsoft.com/technet/exchange/guide/deploy/d_08_tt1.asp

    I recommend you to setup the front-end back-end architecture only within
    a perimeter network. If you want to use the
    advantages of that technology you will have to open some problematical
    ports (see white paper)between the front-end and the back-end server. I
    recommend to allow only client authentifcation over SSL to port 443 on
    the first firewall between the DMZ and the Internet. Pay attention for
    mail relaying on port 25. Implement maximum security to the IIS Servers.

    For more information about Exchange 2000 Security i can recommend you to
    read the following book:
    "configuring Exchange 2000 Server, Syngress, ISBN 1-928994-25-3

    Have a lot fun, Exchange 2000 is a nice product

    Uwe

    -----Original Message-----
    From: Ryan Finnesey [mailto:ryan.finneseyatmosphere.net]
    Sent: Dienstag, 15. Mai 2001 22:31
    To: 'FOCUS-MSsecurityfocus.com'
    Subject: Exchange 2000 Front End Server ?

    Does anyone know were I can get some good docs on locking down a
    Exchange
    2000 Front End Server ?

    Ryan,