Hi,

Hope someone can help, was just wondering if there were any tipe for setting up and securing Outlook Anywhere on a Single Exchange Server?  Are the steps for setting up just the same and are there any extra steps that may need to be carried out to secure the access if it is running on a single server?

Thanks,

D

Nothing extra. Do you use a reverse proxy to publish OA or just the firewall NAT?

Hi,

Thanks for the reply.  We would be using Firewall NAT.  Does it have to have its own dedicated IP address for Outlook Anywhere or can I use the same IP address that has been assigned to the Mail server already?

Thanks,

D

yes , you can use same IP that has assigned to the mail server (SMTP).

because firewall port that client use to access from external is only 443 and 80 (for redirect to https).

But if you have another server that have already mapping 443 port from external.

so you have to change you IP for Exchange (better use static NAT or you can say dedicated IP).

hope this help.

OK, great, thanks.  So just to confirm, I only have one mail server that is on the internal LAN (no servers in DMZ) and all I need to do is open up port 443 for the external address and static NAT that to the mail servers internal address?  So for example: https://mail.domain.com = xxx.xxx.xxx.xxx (public address) NAT to xxx.xxx.xxx.xxx (internal address).

Thanks,

D

Hi

Yes you need to open 443 port for ssl access.

You need to do the following steps for Outlook anywhere access.

• A public DNS record for the external host name you are using for Outlook Anywhere
• A public IP address on the firewall that the public DNS record resolves to
• A NAT or publishing rule to allow SSL/HTTPS connections to reach the Client Access server

Understanding Outlook Anywhere:

http://technet.microsoft.com/en-us/library/bb123741(v=exchg.141).aspx

If you have any feedback on our support, please click here

Any update ?

If you have any feedback on our support, please click here

Hi,

Sorry.  After getting the IP address and DNS configured correctly I now have this all setup and seemingly working perfectly.

Thanks for the help.

D