How to get to Exchange 2000

[lfournier]

I am a PIX newbie so please don't flame if this is the dumbest question you have seen :>.

I need to open up the firewall to allow my users to access Outlook Web Access. I am pretty sure I need a static and conduit statement but not sure exactly what and which ports. Does anyone have any info on this or could you point me to any docs on this subject?

Thanks in advance!

Louanne Fournier
lfournier@nexterna.com

 

[spotcheck]

Louanne,

AFAIK, the only port you need open on the firewall to use OWA is port 80. I'm assuming your Exchange server is in place and functional. Hope this helps.
--doug

 

[br0ck]

word of advise!
use SSL on the iis server that is hosting OWA if you don't you are passing usernames and passwords in clear text over the internet bad idea!

in the case where you use ssl with iis you would create a static command like:
static (inside,outside) exchangepubip Exchangeprivip netmask 255.255.255.255 0 0

then use an access list to open port 443 for ssl
access-list 100 permit tcp any host exchangepubip eq https

also port 80(http) is a commonly attacked port if exposed !!



you will need to set up a certificate server on a 2000 server for this

I can post a link from microsoft’s site on how to do this tomorrow


Best of luck

 

[Rodrnet]

You need to make several open ports and establish between the outside and inside server. You need netbios ports 135-139 and establish between 1024-65535 you outside server needs an acl to the inside. Cisco has a great article on this. the link is below

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/config/msexchng.htm