Home > Ask the Microsoft Exchange Experts > Bradley Dinerman: Exchange Server and SBS Questions & Answers > Windows SBS and Exchange Server security configuration best practices
Ask The Exchange Expert: Questions & Answers
EMAIL THIS

Windows SBS and Exchange Server security configuration best practices

Bradley Dinerman EXPERT RESPONSE FROM: Bradley Dinerman

Pose a Question
Other Exchange Categories
Meet all Exchange Experts
Become an Expert for this site


Exchange Server tips, tutorials and expert advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


>
QUESTION POSED ON: 07 August 2008
We are installing Windows Small Business Server (SBS). We have approximately 10 users, and a new Internet service provider (ISP) is hosting email. Which Windows SBS and Exchange Server configuration best practices should we employ if the company plans to grow?

SMTP forwarding sends email directly to the Windows SBS/Exchange server, but what are the security implications if the Internet Security and Acceleration (ISA) server is not configured? Is the Asymmetric Digital Subscriber Line's (ADSL) built-in firewall secure enough for this solution, or should I configure the ISA server with a second network interface card (NIC)? I am trying to keep the configuration simple, but secure. Any recommendations would be greatly appreciated.


>
Based on your description, ISA Server is acting as a proxy rather than a firewall, and you are relying on your DSL modem's built-in firewall to protect your network. In my experience, firewalls built into DSL modems do not usually provide the level of management granularity necessary to properly configure it for a network.

I recommend one of the two following options:

  1. Add a second NIC to Windows SBS and configure ISA Server as a firewall in addition to a proxy.
  2. Invest in a firewall appliance such as a SonicWall TZ180. Configure the appliance for your network and disable the firewall feature on the DSL modem.

If you choose the ISA Server option, you can use the Windows SBS wizard to configure ISA Server to permit inbound email and/or other services.

Do you have comments on this Ask the Expert Q&A? Let us know.

Ask an Exchange Server question in our forum.


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



RELATED CONTENT
ISA Server and Firewalls for Microsoft Exchange Server
Top 5 Exchange mobile tips of 2008
Microsoft Exchange Server security dos and don'ts
Why Exchange ActiveSync fails with NAT firewalls
Deploying ISA Server as a firewall for Exchange Server mobile devices
Adjust your firewall to avoid Exchange 2007 Direct Push failures
OWA stops working from external network connection
Enhance OWA logon security using Microsoft ISA Server
Firewall problems with Exchange Server 2007 email attachments
How and why to disable certain ESMTP verbs
Creating an ethical firewall in Exchange Server 2007

Small Business Server
Exchange Mailbag: POP3 settings and Outlook issues
Exchange Server 2003 collects email from only specific POP3 domains
Prevent duplicate appointments in Microsoft Outlook 2003 calendar
Problems with email spoofing on SBS 2003
Upgrading from Small Business Server (SBS) 2003 to Exchange Server 2007
Configure a POP3 connector to receive external email on SBS 2003
Connecting an Apple iPhone to Exchange Server on Windows SBS 2003
Configure SMTP connection limits in Exchange Server 2003 and SBS
Migrating mailboxes from Exchange Server 5.5 to Windows SBS 2003
Perform an SMTP Telnet to test an outgoing Exchange server connection

Bradley Dinerman: Exchange Server and SBS
Configuring the default recipient policy in an Exchange 2003 environment
Problems with email spoofing on SBS 2003
Upgrading from Small Business Server (SBS) 2003 to Exchange Server 2007
Migrate Exchange Server mailbox data to a .PST file
Configure a POP3 connector to receive external email on SBS 2003
Configure SMTP connection limits in Exchange Server 2003 and SBS
Move public folder data from Exchange Server to a local share
Migrating mailboxes from Exchange Server 5.5 to Windows SBS 2003
Perform an SMTP Telnet to test an outgoing Exchange server connection
Set up Outlook to use POP3 email and Exchange calendars on Windows SBS

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
reverse proxy server  (SearchExchange.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Outlook Web Access (OWA) Tips and Advice
HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2004 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts