I know it is sacrilege to do so, but I want to publish Exchange 2007 OWA, RPC over HTTPS, and Activesync via my Checkpoint Firewall and NOT use ISA.Anyone have experience with this configuration?Thanks,smooter

I would not suggest it but if you were to do this all you have to do is forward port 443 though to the Client Access Server through the Checkpoint firewall. You may also want to disable it for users that don't require it and keep an eye for the hacking attempts pretty soonafter youforward the port through. All the services are on this one port and the Checkpoint server will not know the contents of the packets. And unless you are setting up a honey pot I would definatley not open up port 80. Good luck. Rhys