Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to securely publish Outlook Web Access on Exchange 2007 without the need of an ISA server?

share|improve this question

migrated from Jun 12 '10 at 5:18

This question came from our site for professional and enthusiast programmers.

It depends on your definition of secure. Many companies expose their client access servers to the internet with nothing but a traditional firewall in front of it, opening just port 443. If you do this, you'd be wise to monitor the Microsoft monthly patches and keep the server up to date with Windows and Exchange patches. If you're not comfortable doing this, then by definition you're looking for an application firewall. ISA is a common choice. Other options are Barracuda's Web Application Firewall or Citrix's NetScaler. If you're using a hardware load balancer, it too might have some application firewall capabilities. For instance, F5 publishes a Deployment Guide for Exchange that includes steps for making Outlook Web Access and other protocols for accessing Exchange more secure via their BigIP.

share|improve this answer

I would look at doing an apache server on a linux box sitting in front of owa. This way when your client needs access they go through this gateway first.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.