Best way to Securely publish OWA and Active Sync

Hi Guys
Just a quick question what is the best way for me to securely publish OWA and Active Sync in Exchange 2013, I have 1 CAS server and one MB server both on my lan but i have 443 open to internet and would like to make it more secure by putting maybe a reverse
proxy or OWA device in my DMA, my setup is small sub 200 users so cost is a factor, what is the most economically way for me to do this with the least amount of work and complication
I know ISA/TMG is now extinct and i dont want to use any linux reverse proxies etc.. just a simple solution that will publish these services securely that is easy to support going forward and inexpensive.
Thanks in advance
Spudney

What exactly are you looking to secure?  If all that you have open is TCP 443 that is a tight setup already.
You'll  have to state the business requirements you are looking to address - and for a 200 user org I suspect that they will be very different from a large enterprise.
Take a look at this pls:
http://blogs.technet.com/b/exchange/archive/2013/07/17/life-in-a-post-tmg-world-is-it-as-scary-as-you-think.aspx
And say hello to Renton as well please!
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:
http://blogs.technet.com/rmilne 
Twitter:   LinkedIn:
  Facebook:
  XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Similar Messages

  • Given ipod from someone best way to delete their music and add to my apple id

    Have been given ipod from someone what is best way to delete their music and then sync to my itumes and apple id

    Hi Caz0,
    You might want to try to factory reset the iPod to wipe it completely. Here's a link on how to do it: http://support.apple.com/kb/ht1339
    As far as I'm aware an iPod Classic isn't tied to an Apple ID, therefore all you need to do is factory reset the iPod, sync your music library and plug in headphones, and you're ready to go!
    Good Luck,
    Stefan

  • What is the best way to secure and harden a Macbook Pro against unwanted surveillance?

    What is the best way to secure and harden a Macbook Pro against unwanted surveillance? Tor, VPN, Little Snitch, etc. This would be for that latest version of Mavericks.

    djbabybokchoy wrote:
    Nothing specific, just speaking in general. Ex-wives, governments, bad guys...anyone really. I'm just looking to make my Mac a bit more private and secure, especially when on public networks.
    Governments and ex's will/may have recourse to the legal process (or in the case of the Gov they can choose to ignore the legal system if they feel like it) when they want to see something of yours, good luck hardening your Mac against that. The best way to avoid the possibility of snooping over public networks is to avoid them but if you can't then Kappy's suggestion will help.
    Strong passwords (everywhere) and don't use the same password in multiple locations.
    If you really want to secure your home wireless use Mac address connection authentication, do not allow unknown Mac addresses to connect. It's much stronger than a WPA password alone.

  • Best way to move the distribution and subscriber to another server

    What is the best way to move the distribution and subscriber role to a different server for transactional replication?
    Stop activity on the publisher then script out the drop and create and point to the new ones?
    The publisher will remain the same server.
    Thank you!
    Paula

    Hi Paula,
    According to your description, you want to move distribution database and subscription database to a different server.
    Firstly, to move distribution database without dropping and recreating the replication topology, you could follow the steps in the
    article . However, the best way I recommend is to remove the replication, create the distribution on the new server, and recreate publication and subscription.
    To make this process simple, you could use SQL Server Management Studio (SSMS) to generate scripts and run the scripts to recreate publications and subscriptions or drop publications and subscriptions as the screenshot below. Checking ‘To create or enable
    the components’ generates the script for creating the publications and subscriptions, and Checking ‘To drop or disable the components’ generates the script for dropping the publications and subscriptions.
    Firstly, please use SSMS to generate the script which is used to create publications and subscriptions.
    1.Connect to Publisher, or Subscriber in SSMS, and then expand the server node.
    2.Right-click the Replication folder, and then click Generate Scripts.
    3.In the Generate SQL Script dialog box, check ‘To create or enable the components’.
    4.Click Script to File.
    5.Enter a file name in the Script File Location dialog box, and then click Save. A status message is displayed.
    6.Click OK, and then click Close. For more information about the process, please refer to the article:
    http://msdn.microsoft.com/en-us/library/ms152483.aspx.
    Secondly, follow the steps above, check ‘To drop or disable the components’ to generate the script used to drop publications and subscriptions. Then run the script to drop publications and subscriptions.
    Thirdly, please disable distribution using Transact-SQL or SSMS following the steps in the article:
    http://technet.microsoft.com/en-us/library/ms152757(v=sql.105).aspx.
    Fourthly, please create the distribution at the new server using Transact-SQL or SSMS following the steps in the article:
    http://msdn.microsoft.com/en-us/library/ms151192.aspx#TsqlProcedure.
    Last, please run the script generated in the first step to recreate publications and subscriptions.
    Regards,
    Michelle Li
    If you have any feedback on our support, please click
    here.

  • What is the best way to safeguard my files and pictures before I send off my MacBook Pro to get fixed?

    What is the best way to safeguard my files and pictures before I send off my MacBook Pro to get fixed? I am running Mavericks and use an AirPort Time Machine to back-up all my files.

    Back up all data on the internal drive(s) before you hand over your computer to anyone. You need at least two independent backups to be completely safe. There are ways to back up a computer that isn't fully functional—ask if you need guidance.
    If privacy is a concern, erase the data partition(s) with the option to write zeros* (do this only if you know how to restore to an empty drive.) Don’t erase the recovery partition, if present.
    Keeping your confidential data secure during hardware repair
    Apple also recommends that you deauthorize a device in the iTunes Store before having it serviced.
    *An SSD doesn't need to be zeroed.

  • Best way to secure wireless?

    I'll be getting a MacBook Pro and wireless broadband from Sky very soon and I was wondering what the best ways of securing your wireless are.I only want the people in my home to use it, not the neighbours.
    Thanks

    In your router be sure to turn on security using WPA2. You can add an additional level of security if the router supports it by creating a private or closed network in which only devices whose MAC addresses are included can join the network. If the router has its own built-in firewall turn it on as well if it isn't on by default. Consult the user manual for your router on how to configure these.

  • Best way to secure RIDC connection?

    Hi All,
    I need you inputs on the best way to secure RIDC connection. RIDC supports the following:
    1. Intradoc - Use Socket SSL.
    2. JAX- WS. -
    3. HTTP - Using Apache HttpClient package. This is not preferred as we don't have an environment that will support WNA.
    I am more interested in knowing the which of the options is better (1 or 2) and reasons for it.
    Thanks,
    SP

    Thanks Yannick for your reply. For the same reason we have choose to use RIDC over SSL.
    I got the configuration working programatically (following the developers guide) but if I try to create a connection of type 'socketssl' i get the following error which i posted in another thread.
    Unable to Create a Content Repository Connection using 'socketssl'
    It would be very helpful if you could let me know if I'm doing something wrong here. I'm using Jdeveloper 11.1.1.5.0.
    Thanks,
    Manjunath
    Edited by: 890922 on 31/10/2011 19:43

  • What is the best way to secure my iPad from ID theft

    What is the best way to secure iPad purchases from the app store?

    Technically, they will import off your flash drive....if it's one of the models that work (maybe 50% do) and if they meet the very rigid naming convention that the iPad insists on.
    It's far easier to use a computer then either sync them on via iTunes, e-mail them to yourself or upload them to something like dropox, then download them onto your device.

  • We have always used one iTunes account and I want to crate a new account for my daughter.  What is the best way to go about this and will she need to download free apps again?

    We have always used one iTunes account and I want to crate a new account for my daughter.  What is the best way to go about this and will she need to download free apps again?

    Not going to happen the way you want it to.
    When you add a gift card balance to the Apple ID, it's available for the Apple ID.
    Probably best to create unique Apple ID's for each... this will also make things easier in the future as purchases are eternally tied to the Apple ID they were purchased with.

  • Best way to secure Aironet 1200 for small office

    We are getting ready to install 4 aironet 1200 AP's into an office that will only be used by 5 people with T43 Thinkpads (Intel 2200 built-in card).
    What is the best method to secure the connection and prevent the outside world from accessing our internal network?
    I don't feel WEP/WPA encryption is enough -- Would be interested in using the built in security that comes with the Aironet and not an external security server, yet.
    Any info or push in the right direction is greatly appreciated.
    Thanks

    You could pretty easily use the "local" RADIUS built-in to the AP firmware and implement LEAP or EAP-FAST.
    Both are pretty easy to set up, the AP can handle that small load without any real performance issues, and the Intel client software supports it (you'll want to make sure all the client software and drivers are the most recent, there were some issues in the past).
    Both LEAP and EAP-FASt will support seamless roaming, You'd set one of the APs up for WDS and the others to point to it.
    Admin (add/change/delete users) via the Web GUI is also pretty straight forward.
    Good Luck
    Scott

  • What is the best way to transfer my music and pictures from my old PC to my new Macbook Pro?

    What is the best way to transfer my music and pictures from my old PC to my new Macbook Pro?

    This may help;
    http://www.apple.com/support/macbasics/migration/
    Ciao.

  • What is the best way of deploying a jsp and bc4j aplication

    Hi
    I would like to know what is the best way of deploying a jsp and
    bc4j aplication in ias 9i.
    thanks in advanced
    rjc

    In the page I simply referenced the facescontext directly... no need for a custom servlet.
    public void createcookie() {
    FacesContext fc = FacesContext.getCurrentInstance();
    HttpServletResponse resp = (HttpServletResponse)fc.getExternalContext().getResponse();
    Cookie userCookie = new Cookie("cookiename", "cookievalue");
    userCookie.setMaxAge(-1);
    userCookie.setMaxAge(3600);
    resp.addCookie(userCookie);
    return null;
    public String readcookie() {
    FacesContext fc = FacesContext.getCurrentInstance();
    ExternalContext ec = fc.getExternalContext();
    Map cookiemap = ec.getRequestCookieMap();
    if (cookiemap != null) {
    Cookie cookie = (Cookie) cookiemap.get("cookievalue");
    return cookievalue;
    For reference I could not get getCookies() method of HttpServletRequest to work.. it would only return JSESSIONID.

  • What is the best way to back up photos and videos to a dvd from iPhoto, not in iPhoto format but just in jpeg format to access on either windows or mac

    what is the best way to back up photos and videos to a dvd from iPhoto, not in iPhoto format but just in jpeg format to access on either windows or mac

    When you export the videos out of iPhoto be sure to select Kind = Original.  Otherwise you'll just get an image file of the first frame of the video.
    OT

  • What is the best way to create E-Flyers and insert to Microsoft Outlook??

    What is the best way to create E-Flyers and insert to Microsoft Outlook??

    http://kb.mailchimp.com/article/how-to-code-html-emails
    Once created, the HTML document cab be placed in the Stationery folder.
    On a PC it's here.
    "C:\Program Files\Common Files\Microsoft Shared\Stationery"

  • What is the best way to reformat a mini and reinstall Mavericks

    What is the best way to reformat a mini and reinstall Mavericks?

    Hi ruthefrombenson!
    This article can help you erase your hard drive and reinstall Mavericks:
    OS X Mavericks: Erase and reinstall OS X
    http://support.apple.com/kb/PH14243
    Thanks for being a part of the Apple Support Communities!
    Regards,
    Braden

Maybe you are looking for

  • Issue in RMI connection from NW

    Hi All, We are working on SAP NW 7.0 connectivity to an external J2EE  application running on Websphere platform using RMI protocol. We are facing issues in connecting a Java application running on NW 7.0 to that external application. The EJB  of the

  • I am unable to add songs to a playlist, what do I do?

    I am unable to add songs to a playlist.  Any suggestions.  All of the things I've previously done to add songs don't work now.

  • HT4623 Why can't I Play the free games after I download them

    Why can't I get play the games after I download them?

  • LOGINserver problem

    I am posting this in the Leopard forum because I have been attempting to reconstruct my iMac (early 2008) after my harddrive apparently failed.  Prior to this I was running Mountain Lion but found it was running very slow, ostensibly dues to the fail

  • HELP: Nomad Zen Xtra: MP3 filename

    I don't have any sort of ID3 tags on my MP3s. I have them all sorted by filename. For example "ACDC - Back in Black.mp3". I really want to use this player but it's kind of troubling for me to not be able to just drag and drop my mp3s into the player