Hello, I'm currently rethinking my Exchange 2013 install, I have a network of 20 users and 2 servers, one is my domain controller/file server and the other is my Exchange 2013 server.  I have setup the Exchange server as a member server and configured all of the network and Exchange settings.  Everything is working fine and I currently have the Client Access and Mailbox Server roles installed.  I have all of the users and mailboxes working and mail is flowing. I have NIC1 configured for my internal network and NIC2 disabled.  Here is where I'm rethinking my setup and need some advice. With having one Exchange server should I install the Edge Transport Server role, I currently have Exchange 2013 SP1 CU7 installed.  If the answer is yes how should I go about re-configuring my settings for the server.

Thanks Ryan.

• Edited by Ryan Laurie 18 hours 20 minutes ago

Giving you a definite answer is difficult, because the only disadvantage every extra layer of security has, is the extra cost. So I will just give you following quotes to help you decide, whether the Edge Transport role is a useful addition to your email infrastructure.

Edge Transport servers minimize the attack surface by handling all Internet-facing mail flow, which provides SMTP (Simple Mail Transfer Protocol) relay and smart host services for your Exchange organization. Agents running on the Edge Transport server provide additional layers of message protection and security. [] Because the Edge Transport server is installed in the perimeter network, it's never a member of your organization's internal Active Directory forest and doesn't have access to Active Directory information.
(https://technet.microsoft.com/en-us/library/dn635117%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396)

We recommend that the Edge Transport role be installed in a perimeter network outside of your organization's internal Active Directory forest.
(https://technet.microsoft.com/en-us/library/bb124701%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396)

• Edited by sr 16 hours 53 minutes ago

Whatever you decide, just remember you would need to stand up another server for your edge transport server!

https://technet.microsoft.com/en-us/library/bb124701(v=exchg.150).aspx

Ok, thanks guys, so it looks like for my small business the configuration that I have is the best one unless I get another server to handle the Edge Transport Server.  Just wanted to make sure.

Thanks Ryan.