Need of Edge Server

[Latta]

I am planning a new installation of Exchange 2007 coming from a POP3 environment. I have about 65 users and have been reading up on Exchange, but I am kind of confused on the Edge Transport Server role and the Client Access Server role. On the Edge Transport role, is it really needed? I plan on putting in an IronPort appliance that takes care of viruses and spam, so do I still need the Edge Transport role? On the Client Access role, is it safe not to have it in the DMZ? I haven't really looked into it to much, but having webmail on the exchange box, isn't that a security risk? Any help would be appreciated. I have purchased a book online by Tony Redmond so I am going to start reading that. But I was looking for some help for budgetary reasons.

 

[58sniper]

Edge is optional, and would be hard to justify the cost for 64 users. If you're going to use an IronPort instead, you'll be fine.

Client Access should never go in the DMZ. The only Exchange related resources that can go in the DMZ are Edge and ISA.

Pat Richard MVP

 

[Latta]

Thanks for the information. On the Client Access role, so the firewall is the main security protecting CAS and exchange server from outside attacks since this will be available on the web with OWA? Do you know if there is a good security guide for this? Would it be helpful to move the CAS to another machine?

Security isn't really my speciality, so any help is greatly appreciated. By the way, I am running the ASA 5510 for my firewall.

 

[58sniper]

The recommended practice is to put an ISA box in the perimeter to reverse proxy for OWA.

Pat Richard MVP