Anyone using ISA 2006 with Exchange 2007

[Deathwish]

Just wondering how you have your network configured regarding OWA publishing? We have a single ISA 2006 box with a single NIC on the LAN. This is listening on 443. The core firewall is then allowing the public IP to pass through to the ISA box on 443.

Our security officer is not convinced by this and is of the opinion that everything external facing should be in the DMZ.

Has anyone else come across this, and/or are we doing it wrong?

Cheers

 

[Deathwish]

[Internet] --Port443--> [Hardware Core Firewall] --Port443--> [ISA on LAN Single NIC]

Our old Exchange 2003 Front-End went:

[Internet] --Port443--> [Hardware Core Firewall] --Port443--> [OWA on DMZ] --LotsofPorts--> [Ex2003 on LAN]