Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IMAP configuration on asa 5510 : Exchange 2003

    Good Day guys,

Looking for a recommendation to secure imap via asa 5510.  Currently running exchange 2003. Any assistance would be greatly appreciated.

3 REPLIES
VIP Purple

Re: IMAP configuration on asa 5510 : Exchange 2003

What do you mean by securing?

In general: the ASA has no application-layer inspection for IMAP. To increase the security you could deploy a scenario like the following:

1) Configure your clients for IMAPs.
2) On the ASA configure a port-forwarding for TCP/993 (which is used by IMAPs) to a DMZ-server running an IMAP-proxy. This proxy could be NGINX or dovecot (there are probably more imap-proxies available)
3) On the proxy configure forwarding the traffic to the internal Exchange server which again has to be allowed on the ASA.

With this setup you don't have to expose your exchange directly to the internet.


Sent from Cisco Technical Support iPad App


--
Don't stop after you've improved your network! Improve the world by lending money to the working poor: http://www.kiva.org/invitedby/karsteni
Silver

IMAP configuration on asa 5510 : Exchange 2003

This is not really a Cisco question but here is none Cisco answer:

http://security.fi.infn.it/tools/stunnel/index-en.html

Value our effort and rate the assistance!
Silver

IMAP configuration on asa 5510 : Exchange 2003

Please rate our assistance

Value our effort and rate the assistance!
625
Views
0
Helpful
3
Replies
CreatePlease login to create content