owa with SSL

[mk001]

I use OWA through exchange 2000 server. If I don't use SSL, is it safe?

if not, how to setup SSL in OWA? do I need to pay for SSL to some authority?

thanks

 

[Zelandakh]

Safe? Yes. Secure? No.

You need a certificate from a third party provider.

 

[mk001]

hi,

i search info from internet. some web site teach to setup stand-alone CA function in windows 2003 server to provide SSL for OWA. is it OK?

if yes, it will save the cost to buy third party certificate.

thanks

 

[Zelandakh]

You can easily create your own self signed certificate. Anyone outside your LAN will be unable to get to OWA without seeing the error message that says that the web site is not secured with a 3rd party certificate. (Unless they install your cert).

Depends how important it is to your organisation - $20 isn't that much.

 

[mk001]

zelandakh,

thank you for your reply. you mean that if i create CA by myself, the user cannot use owa outside the company?

 

[Zelandakh]

They *can* use OWA outside the company but everyone will get the message about the certificate not being issued by a trusted authority - every time they try to connect to OWA.

Given the cost of the cert, most people are advising buying one rather than making one.