Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Would it not be a security risk to have phones connecting directly to our Exchange server rather than a front end server in a dmz?

Also, we'd need to disable SSL on the Exchange Virtual Directory; would this cause the communications between the handsets and Exchange to be un-encrypted?

Any advice would be appreciated!

Thank you :)

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

Do you currently access the Exchange server from the outside in any way, like OWA? If so, Is it currently secured with an SSL cert? If those answers are yes, then it should not be a problem at all. A lot of SMBs use SBS and have this exact config.

On the second part, why are you disabling SSL?

share|improve this answer
    
Nope, only internal access the the moment. So I guess we'll need to get some certs setup then to secure it all? According to the M$ blurb (support.microsoft.com/default.aspx?scid=kb;en-us;817379), I need to create another virtual directory that doesn't use SSL, otherwise it won't work. Thanks for replying btw! –  Mungo1984 Mar 19 '10 at 15:31
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.