How to secure OWA?

[jcbejarano]

Hi, I´m ready to publish my OWA but I´m a little scared about security because it´s my unique exchange server in all the office.

Task already done:
- IISLockdown
- Firewall forward only port 80
- Disable HTTP Protocol for all the users except that what is expected to use OWA.
- Windows updated patches.
- OWA Specific patches
- Exchange service packp 3 and post sp3 fixes.
- Tested with MS Base line analyzer
- The OWA Users has strong passwords (not by policy, manually controlled by me

What do you suggest? It´s good enough? Or may be try to install another exchange server and use it like OWA front end?

Thanks

 

[Zelandakh]

That's at least what I have done. Been working for me for the last 5 years....

 

[jcbejarano]

Thanks, I was worried ´cause y never has implemented OWA 2000 before...