Web mail security

[barney2]

I have a single 2003 server with exchange 2003 and a watchguard firewall.

I want web mail from anywhere.

I have achieved this by allowing https (only) in thru my firewall from any ip.

Four questions:-
1. Am I exposing my network to a threat by doing this.

2. Is is possible to set up Outlook Web access on a pc on a dmz and contact my mail server on the internal lan this way.

3. If so will outlook web access server run on a normal xp workstation.

4. What about the points above if I also allow http (as well as https) for Outlook Mobile Acess.

Thanks

 

[AndyPeck]

I have a single 2003 server with exchange 2003 and a watchguard firewall.

I want web mail from anywhere.

I have achieved this by allowing https (only) in thru my firewall from any ip.

1. Am I exposing my network to a threat by doing this.
Q, Yes, but no more or less than a every other web server. However that said, this is not the recommended why to expose exchange to the internet. MS like you to use ( I mean buy) ISA server for this task

2. Is is possible to set up Outlook Web access on a pc on a dmz and contact my mail server on the internal lan this way.
Q. Yes, but it requires server software and not XP, research Exchange frontend servers

4. What about the points above if I also allow http (as well as https) for Outlook Mobile Acess.
Q, no real change,

Thanks