
	Home > Ask the Microsoft Exchange Experts > Bradley Dinerman: Exchange Server and SBS Questions & Answers > Windows SBS and Exchange Server security configuration best practices

Ask The Exchange Expert: Questions & Answers

EMAIL THIS

Windows SBS and Exchange Server security configuration best practices

EXPERT RESPONSE FROM: Bradley Dinerman

		Pose a Question

		Other Exchange Categories

		Meet all Exchange Experts
		Become an Expert for this site

Exchange Server tips, tutorials and expert advice

Digg This! StumbleUpon Del.icio.us

QUESTION POSED ON: 07 August 2008
We are installing Windows Small Business Server (SBS). We have approximately 10 users, and a new Internet service provider (ISP) is hosting email. Which Windows SBS and Exchange Server configuration best practices should we employ if the company plans to grow?

SMTP forwarding sends email directly to the Windows SBS/Exchange server, but what are the security implications if the Internet Security and Acceleration (ISA) server is not configured? Is the Asymmetric Digital Subscriber Line's (ADSL) built-in firewall secure enough for this solution, or should I configure the ISA server with a second network interface card (NIC)? I am trying to keep the configuration simple, but secure. Any recommendations would be greatly appreciated.

Digg This!

StumbleUpon

Del.icio.us

RELATED CONTENT

	ISA Server and Firewalls for Microsoft Exchange Server
	Top 5 Exchange mobile tips of 2008
	Microsoft Exchange Server security dos and don'ts
	Why Exchange ActiveSync fails with NAT firewalls
	Deploying ISA Server as a firewall for Exchange Server mobile devices
	Adjust your firewall to avoid Exchange 2007 Direct Push failures
	OWA stops working from external network connection
	Enhance OWA logon security using Microsoft ISA Server
	Firewall problems with Exchange Server 2007 email attachments
	How and why to disable certain ESMTP verbs
	Creating an ethical firewall in Exchange Server 2007

Small Business Server

Problems with email spoofing on SBS 2003

Upgrading from Small Business Server (SBS) 2003 to Exchange Server 2007

Configure a POP3 connector to receive external email on SBS 2003

Connecting an Apple iPhone to Exchange Server on Windows SBS 2003

Configure SMTP connection limits in Exchange Server 2003 and SBS

Migrating mailboxes from Exchange Server 5.5 to Windows SBS 2003

Perform an SMTP Telnet to test an outgoing Exchange server connection

Set up Outlook to use POP3 email and Exchange calendars on Windows SBS

How to configure DNS records for Exchange Server on Windows SBS 2003

Forward Exchange Server email to an ISP using Active Directory

Bradley Dinerman: Exchange Server and SBS

Configuring the default recipient policy in an Exchange 2003 environment

Problems with email spoofing on SBS 2003

Upgrading from Small Business Server (SBS) 2003 to Exchange Server 2007

Migrate Exchange Server mailbox data to a .PST file

Configure a POP3 connector to receive external email on SBS 2003

Configure SMTP connection limits in Exchange Server 2003 and SBS

Move public folder data from Exchange Server to a local share

Migrating mailboxes from Exchange Server 5.5 to Windows SBS 2003

Perform an SMTP Telnet to test an outgoing Exchange server connection

Set up Outlook to use POP3 email and Exchange calendars on Windows SBS

RELATED GLOSSARY TERMS

Terms from Whatis.com − the technology online dictionary

reverse proxy server (SearchExchange.com)

RELATED RESOURCES

2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems

Search Bitpipe.com for the latest white papers and business webcasts

Whatis.com, the online computer dictionary

Based on your description, ISA Server is acting as a proxy rather than a firewall, and you are relying on your DSL modem's built-in firewall to protect your network. In my experience, firewalls built into DSL modems do not usually provide the level of management granularity necessary to properly configure it for a network.

I recommend one of the two following options:

Add a second NIC to Windows SBS and configure ISA Server as a firewall in addition to a proxy.

Invest in a firewall appliance such as a SonicWall TZ180. Configure the appliance for your network and disable the firewall feature on the DSL modem.

If you choose the ISA Server option, you can use the Windows SBS wizard to configure ISA Server to permit inbound email and/or other services.

Do you have comments on this Ask the Expert Q&A? Let us know.

Ask an Exchange Server question in our forum.

Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.

Browse our Expert Advice
Operating Systems IT Management Networking Database	Security Servers and Storage Applications and Development Career Center

Outlook Web Access (OWA) Tips and Advice

SEARCH

TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.


TechTarget Corporate Web Site \| Media Kits \| Site Map All Rights Reserved, Copyright 2004 - 2009, TechTarget \| Read our Privacy Policy