Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Does anyone allow Exc 5.5 to SMTP behind a FW to Internet?

I am trying to redesign our SMTP infrastructure to maintain a consistent flow of mail.

I was thinking of using the DMZd Ironport only for inbound Internet mail and creating a 2nd Exchange 5.5 Server with an IMC connecting directly to our ISP via a FW connection for all outbound traffic.

Does anyone do this? Are there security concerns with an Outbound only 5.5 IMC behind a FW?

Thanks,
-Matt

3 REPLIES
New Member

Re: Does anyone allow Exc 5.5 to SMTP behind a FW to Internet?

Just add another listener on a second IP and use the same IronPort for both inbound and outbound email to the Internet, it's a whole lot better solution than exposing Exchange 5.5 to the Internet (even outbound behind a firewall).

Erich

New Member

Re: Does anyone allow Exc 5.5 to SMTP behind a FW to Internet?

I would agree with Erich.

New Member

Re: Does anyone allow Exc 5.5 to SMTP behind a FW to Internet?

Thanks for the feedback.

I am thinking that I will use our NLB switch to make box1 our primary inbound SMTP server with failover to box2 and make box2 the primary outbound SMTP server with failover to box1.

That should segegrate the traffic and provide HW failover.

-Matt

179
Views
0
Helpful
3
Replies