Simple question about Exchange 2003 Server Topology

Donatas Grasys · Joined: 28 Sep 2007 Posts: 19

Hello,

I don't know how to make Exchange Server to communicate to outside world. We
have VPN Server and Proxy Server in our network. And both of them have two
network cards one for internal network another for internet connection.
Cards for internet connection are connected to the old Cisco firewall pix
501 and firewall is connected to the simple netgear router. I don't know how
to connect Exchange Server to the network, because it has only one network
card. I dont know if I can connect firewall straight to our network (so I
would be able to forward apropriate ports to the servers) or I have to put
something between firewall and internal network and pass SMTP traffic
throught that device. I would be pleased to hear any suggestions.

Thanks

Archived from group: microsoft>public>exchange>design

John Oliver, Jr. [MVP] · Joined: 05 Aug 2007 Posts: 823

Have the Pix port forward the necessary Exchange Ports, typically 25 and
443. Litttle more reading at,

http://www.msexchange.org/tutorials/MF002.html

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2008
Microsoft Certified Partner

"Donatas Grasys" wrote in message $4pb$1$8300dec7@news.demon.co.uk...
> Hello,
>
> I don't know how to make Exchange Server to communicate to outside world.
> We have VPN Server and Proxy Server in our network. And both of them have
> two network cards one for internal network another for internet
> connection. Cards for internet connection are connected to the old Cisco
> firewall pix 501 and firewall is connected to the simple netgear router. I
> don't know how to connect Exchange Server to the network, because it has
> only one network card. I dont know if I can connect firewall straight to
> our network (so I would be able to forward apropriate ports to the
> servers) or I have to put something between firewall and internal network
> and pass SMTP traffic throught that device. I would be pleased to hear
> any suggestions.
>
> Thanks
>

Donatas Grasys · Joined: 28 Sep 2007 Posts: 19

I can not forward ports to my Exchange because my firewall is connected to
VPN server and Proxy Server and Exchange 2003 is sitting behind these
servers on the internal network.
I am not sure if it is right topology, because the guy before me done all
that. I think I have to connect firewall to our internal network so only
then I would be able to do port forwarding.

Thanks for helping me guys

"Donatas Grasys" wrote in message $4pb$1$8300dec7@news.demon.co.uk...
> Hello,
>
> I don't know how to make Exchange Server to communicate to outside world.
> We have VPN Server and Proxy Server in our network. And both of them have
> two network cards one for internal network another for internet
> connection. Cards for internet connection are connected to the old Cisco
> firewall pix 501 and firewall is connected to the simple netgear router. I
> don't know how to connect Exchange Server to the network, because it has
> only one network card. I dont know if I can connect firewall straight to
> our network (so I would be able to forward apropriate ports to the
> servers) or I have to put something between firewall and internal network
> and pass SMTP traffic throught that device. I would be pleased to hear
> any suggestions.
>
> Thanks
>

John Oliver, Jr. [MVP] · Joined: 05 Aug 2007 Posts: 823

So the VPN and Proxy Server are sitting in a DMZ? If so, then you will need
to configure one of the ports on your Pix for a secure connection to your
internal network. It allows for up to 8 vlans if you have the 8 port model.
The ASA 5505 allows for this but you did not state what model you have. And
why do you have a separate VPN device when the Pix can provide this
capabality? Why the Proxy Server?

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2008
Microsoft Certified Partner

"Donatas Grasys" wrote in message $9fn$1$8300dec7@news.demon.co.uk...
>I can not forward ports to my Exchange because my firewall is connected to
>VPN server and Proxy Server and Exchange 2003 is sitting behind these
>servers on the internal network.
> I am not sure if it is right topology, because the guy before me done all
> that. I think I have to connect firewall to our internal network so only
> then I would be able to do port forwarding.
>
> Thanks for helping me guys
>
> "Donatas Grasys" wrote in message
> $4pb$1$8300dec7@news.demon.co.uk...
>> Hello,
>>
>> I don't know how to make Exchange Server to communicate to outside world.
>> We have VPN Server and Proxy Server in our network. And both of them have
>> two network cards one for internal network another for internet
>> connection. Cards for internet connection are connected to the old Cisco
>> firewall pix 501 and firewall is connected to the simple netgear router.
>> I don't know how to connect Exchange Server to the network, because it
>> has only one network card. I dont know if I can connect firewall straight
>> to our network (so I would be able to forward apropriate ports to the
>> servers) or I have to put something between firewall and internal network
>> and pass SMTP traffic throught that device. I would be pleased to hear
>> any suggestions.
>>
>> Thanks
>>
>
>

Exchange 2007 topology We are planning to go for Exchange 2007 single forest topology with country A being the hub and no Exchange server in other countries, like what Microsoft is doing. But I would like to find out for the branch offices within each country, can I just have a

SMTP Relay Server Question Guys, Quick question for you all. I have been using Exchange 2007 Edge Transport server as my SMTP Relay out to the internet. To be honest, I find it pants! The rules engine for example is just doesn't do what I need. Can anyone recommend an alternati

Backup Exchange 2003 Enterprise server? My agency doesn't have the money to fund a full disaster recovery setup for Exchange 2003 Enterprise, but I'm wondering if this will work. Setup a second Exchange 2003 Ent. server in one of our remote offices, leave the Exchange services turned off, backu

Exchange 2007 Edge server in Exchange 2003 Organization I would like to deploy Exchange 2007 EDGE servers in my DMZ for incoming email but my entire organization is running Exchange 2003 in an AD 2003 environment. 1. Can I do this? Will the 2007 EDGE servers work with Exchange 2003? 2. If so (and I go to assu

Migrate from Exchange Server 2003 GAL to Exchange 2007 We recently stood up another mail server (2007) from our parent company. I would like to migrate the GAL from my our parent company. They are running Exchange 2003. Any suggestions on how I can move their GAL into our server? Thank you Harry