OWA from a Corporate Website Link

[resources]

Today my boss asked what it would take to create a link on our corporate website that would allow users to access their email via Outlook Web Access. Currently I allow a handful of users rights to logon via OWA to get their email by using a public address. Some of the problems that I have experienced with OWA is that you have to use a Micrsoft browser for it to work. Also, if a user has a cable modem service such as AT&T's @home, a proxy setting is forced and a registered DLL has to unregistered to allow connectivity. Would I need a VPN configured on my network to allow users to access to OWA via a corporate web link? What are the possible security risks involved with implementing this? Thanks.

 

[Zelandakh]

Never heard of that proxy problem - seems to work for me.

Patch IIS and Exchange to latest. Make sure all shares on IIS / Exchange are shared to the right groups and not just everyone, check all security permissions. Then your OWA should be ok.

Check your firewall is implemented correctly too as this will keep out 99% of all hackers. Prevention is better than cure.

 

[abrannon]

We allow all email users to access thier email through OWA. We have not exp. any of the problems that you have. We register our Email server as a pop3 server on the web. Similiar to other web based email services. This was not that hard to do. A good site to look at is

http://www.exchangeworkshop.com/,

I think they are down right now but will be up soon. An interesting note about this site, it is hosted on an exhange server. As for the security risk. Well anytime you give a computer a public address there is a risk.

I know this is not very helpful but I thought it might give you some ideas.