New to ISA2004 and FE Exchange 2003

Hello everyone,
Sorry if this has been asked/posted before.

My senerio is this. I presently have an exchange 2003 server. I resently
built a DMZ and installed an ISA 2004 box.

I want to install exchange 2003 in the DMZ but am not certain of the process
and am worried about messing up my VERY stable existing exchange server. How
do I install exchange on the DMZ server if it is not part of the existing
domain/forest because the ISA server is between them. Sorry for my lack of
understanding here. :-(

Is there any documentation that would walk me step by step on how to add the
FE 2003 server into the DMZ and change the certification to the FE from the
backend etc.??

Thanks in advance everone.

Mark
Fri Aug 18 02:12:18 CDT 2006

On Thu, 17 Aug 2006 20:53:01 -0700, RCB
<RCB@discussions.microsoft.com> wrote:

>Hello everyone,
>Sorry if this has been asked/posted before.
>
>My senerio is this. I presently have an exchange 2003 server. I resently
>built a DMZ and installed an ISA 2004 box.
>
>I want to install exchange 2003 in the DMZ but am not certain of the process
>and am worried about messing up my VERY stable existing exchange server. How
>do I install exchange on the DMZ server if it is not part of the existing
>domain/forest because the ISA server is between them. Sorry for my lack of
>understanding here. :-(

You do not want to install Exchange into the DMZ.

Go to www.microsoft.com/exchange/library and get the FE/BE
configuration scenario guide.

>
>Is there any documentation that would walk me step by step on how to add the
>FE 2003 server into the DMZ and change the certification to the FE from the
>backend etc.??
>
>Thanks in advance everone.

RCB
Fri Aug 18 19:40:02 CDT 2006

Why not and what is my alternative?

"Mark Arnold [MVP]" wrote:

> On Thu, 17 Aug 2006 20:53:01 -0700, RCB
> <RCB@discussions.microsoft.com> wrote:
>
> >Hello everyone,
> >Sorry if this has been asked/posted before.
> >
> >My senerio is this. I presently have an exchange 2003 server. I resently
> >built a DMZ and installed an ISA 2004 box.
> >
> >I want to install exchange 2003 in the DMZ but am not certain of the process
> >and am worried about messing up my VERY stable existing exchange server. How
> >do I install exchange on the DMZ server if it is not part of the existing
> >domain/forest because the ISA server is between them. Sorry for my lack of
> >understanding here. :-(
>
> You do not want to install Exchange into the DMZ.
>
> Go to www.microsoft.com/exchange/library and get the FE/BE
> configuration scenario guide.
>
> >
> >Is there any documentation that would walk me step by step on how to add the
> >FE 2003 server into the DMZ and change the certification to the FE from the
> >backend etc.??
> >
> >Thanks in advance everone.
>
>

Mark
Sat Aug 19 04:05:36 CDT 2006

You should have read the scenario guide before posting a response.
Since you havent't:
Exchange in a DMZ requires a number of ports open between the DMZ and
the internal network, ports that go to Domain Controllers. Now, do you
want me to go on about how undesirable that is?

The options are to simply put the FE on the internal network and only
publish TCP443 to it. An alternative is to use an ISA server and not
actually have an FE.

I would encourage you to read the documnent and compare it to what you
already have and how you would like to operate.