Security with exchange in the Domain Controller and VPN's

[dianaf]

Hello!!!

I am running the exchange server software in the windows 2000 domain Controller. Actually We have just that server, We are a small business (11 users).

The point is that we need to implement VPN's, which is really scary for me . We got just a Hardware firewall and that server. What should I take in consideration about security? what should i implement?...I think is very dangerous, isn't it?

Hope someone can help me, Thanks in advance,
Diana Foliaco.

 

[shadow07]

What is the firewall you purchased? As for security, take a look at

http://www.microsoft.com/technet/security.

It's good place to start for security related topics and whitepapers.

One word of advice: Stay up-to-date on patches and security exploits. Subscribe to Microsoft's Security Newsletter, which they use to send out notifications about security issues. Download the Lite version of HFNETCHK Pro 4.0 from Shavlik. You can get it here,

http://www.shavlik.com.

 

[AlexIT]

I would suggest getting a second device (VPN-enabled router, VPN-enabled firewall, etc.) to host the VPN, not using the AD server for that. There is quite a load placed on the box when continuously encrypting/decrypting traffic. Depending on the firewall, you may already have the hardware you need...just pay them for the "VPN" software license.

Alex

 

[DC0]

Sir,

The above config is very dangerous... I understand that your a smaller operation however your company may wish to determine how much does security mean to them...

The above config is dangerous because if exchange becomes exploited so has your main source of user authenication adn thats where their passwords are held

However with the above in mind, and i know smaller companies dont have cash to blow esp in the current economy this is what i would do...

Look into the cisco pix 501 or 515e. Depending on how much traffic your expecting. This will provide you with a firewall and a VPN solution.

If you were to buy 2, you could easily link them together to provide site to site vpn.

If you have any questions about the above give me a shout.