Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Would it not be a security risk to have phones connecting directly to our Exchange server rather than a front end server in a dmz?

Also, we'd need to disable SSL on the Exchange Virtual Directory; would this cause the communications between the handsets and Exchange to be un-encrypted?

Any advice would be appreciated!

Thank you :)

share|improve this question
up vote 1 down vote accepted

Do you currently access the Exchange server from the outside in any way, like OWA? If so, Is it currently secured with an SSL cert? If those answers are yes, then it should not be a problem at all. A lot of SMBs use SBS and have this exact config.

On the second part, why are you disabling SSL?

share|improve this answer
Nope, only internal access the the moment. So I guess we'll need to get some certs setup then to secure it all? According to the M$ blurb (;en-us;817379), I need to create another virtual directory that doesn't use SSL, otherwise it won't work. Thanks for replying btw! – Mungo1984 Mar 19 '10 at 15:31

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.