Per MS (Using Microsoft Exchange 2000 Front-End Servers.pdf - available from
MS TechNet) it is configuration 1).

-----Original Message-----
[] On Behalf Of Jason Gomes
Sent: Sunday, May 01, 2005 2:14 AM
Subject: [fw-wiz] PIX -> ISA -> OWA Configuration

What is the preferred placement for a OWA front-end server given these
two possible network configurations and why?

1) [Internet] <==> [PIX Firewall] <==> [ISA Proxy] <==> [PIX Firewall]
<==> [OWA] <==> [Internal Net w/Exchange Svr]

2) [Internet] <==> [PIX Firewall] <==> [ISA Proxy] <==> [OWA] <==> [PIX
Firewall] <==> [Internal Net w/Exchange Svr]

The ISA server is performing a reverse proxy for HTTPS connections.
In #1, the backend firewall will only allow port 443 through to OWA.
In #2, all ports required for OWA to communicate with the internal
exchange server is allowed.
firewall-wizards mailing list

firewall-wizards mailing list