pix config for exchange

[binoyjosephstanly]

Dear all,

i have a pix515e with DMZ. I am planning to put frontend exhange server at DMZ and backend exchange server at inside. Can anyone plz send me the configuration for how to open the ports from outside to dmz and dmz to inside.

thanks

Savad

[jmia]

Savad,

Here you go:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008015efa9.shtml

Hope this helps and please rate post if it does as it may help others too.

Thanks /

[binoyjosephstanly]

Dear J,

thanks for the link.I need the pix configuration for exchange frontend backend server. mails should be forwarded from dmz to inside as well viceversa. how to enable the specific ports which exchnage requires.

thanks & regds

Savad

[vwalsh]

We use exchange internal

- the dmz frontend server to internal exchange for us is accessed via a browser url that uses https

- the user then logs in authenticating to Active Directory.

If this is your configuration

- then from the internet to the dmz frontend server you only need to open https to the dmz frontend server.

Then from the dmz frontend server you need to open only the Active Directory ports and dns ports needed to authenticate

- the rules would be from the dmz frontend server to you domain controllers - dns servers and your exchange server(s)

- you will also need to open http to your exchange server(s)

[mpalardy]

Configuring the PIX Firewall with Mail Server Access on DMZ Network information will be found here:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008015efa9.shtml

HTH

[mpalardy]

Oops, same solution as J. provided earlier.

All my apologises, I did not see this.