I just wanted to know the security implications of having RPC over HTTP. I read in an article that ISA server checks the encapsulated HTTP packets which makes it more secure but what is if we dont have an ISA server and have a Linux Reverse Proxy in between outside firewall and Exchange Front End ? Overall my concern is that without ISA server can RPC over HTTP become a security risk ?