Announcement

Collapse
No announcement yet.

Exchange 2007 Backup and Elementary Security questions

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Exchange 2007 Backup and Elementary Security questions

    Hi.

    I am setting a small office network with three servers: DC/DNS/File Server, Exchange and Application Server with 20-30 mailboxes.

    1. Which is the best way to backup the exchange server and avoid Backup Exec? Image the whole server everyday and take regular differential backups of the database stores every 4h maybe isnt the best thing to do to restore single mailboxes or mails... Is there a product more easy to configure than backup exec? And will restoring the database stores in case of failure cause any serious problem(besides loosing some emails)?

    2. From a security point of view is it sufficient to have an Exchange 2007 Server with all roles behind a typical (Linksys) ADSL router and use PAT (Port Forwarding) of ports 443 (OWA/OMA/Activesync), 25, 110 to the exchange server directly? I know that ISA does server publishing and application-level filtering but it would be preffered to keep things simple (and cheeper) without using ISA if possible...
    Last edited by vasal; 13th January 2009, 11:43.

  • #2
    Re: Exchange 2007 Backup and Elementary Security questions

    Imaging Exchange is not a valid backup method. Don't even start going down that path. What version of server are you running Exchange 2007 on?
    http://technet.microsoft.com/en-us/l.../aa998870.aspx

    You don't need ISA but I would generally say the $300 or whatever the cost is nowadays for a dedicated HW firewall instead, is worth it. Security is down to the risks you want to take balanced against the money you can/want to spend
    cheers
    Andy

    Please read this before you post:


    Quis custodiet ipsos custodes?

    Comment


    • #3
      Re: Exchange 2007 Backup and Elementary Security questions

      You don't need ISA, IAG is also an option for publishing
      Marcel
      Technical Consultant
      Netherlands
      http://www.phetios.com
      http://blog.nessus.nl

      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
      "No matter how secure, there is always the human factor."

      "Enjoy life today, tomorrow may never come."
      "If you're going through hell, keep going. ~Winston Churchill"

      Comment


      • #4
        Re: Exchange 2007 Backup and Elementary Security questions

        There are plenty of other options than the Backup Exec product. Backup Assist is very popular in the SMB community, it is cheap and does Exchange aware backups.

        I have run Exchange behind a common or garden Linksys type router, although I now deploy mainly the Cisco 857W. Only port 443 and 25 open.

        Simon.
        --
        Simon Butler
        Exchange MVP

        Blog: http://blog.sembee.co.uk/
        More Exchange Content: http://exchange.sembee.info/
        Exchange Resources List: http://exbpa.com/
        In the UK? Hire me: http://www.sembee.co.uk/

        Sembee is a registered trademark, used here with permission.

        Comment


        • #5
          Re: Exchange 2007 Backup and Elementary Security questions

          ISA and IAG has some advantages with inspecting within the SSL bridge what Linksys and 857W doesn't do.
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment

          Working...
          X