Front-End Server behind a Firewall


Topic Last Modified: 2005-05-24

The following figure illustrates a front-end and back-end topology where the front-end server is behind the firewall.

A simple Exchange firewall topology

Front-end server inside firewall

To achieve security and still provide access to Outlook Web Access, POP, or IMAP from the Internet, a corporation wants to put the Exchange system behind the corporate firewall.

Because the whole configuration is inside the firewall, Exchange does not require any special configuration. After a request comes through the firewall to the front-end server, the front-end server returns a response without any configuration changes.

IP address filtering is highly recommended to limit requests through the firewall to only those going to the front-end server (or servers) that are running Exchange and block requests through the firewall to other servers in the organization.