Chapter Summary

• You can place a front-end Exchange Server 2003 server behind the intranet firewall or in the DMZ. Back-end Exchange Server 2003 servers should be behind the firewall.

• MAPI clients such as Outlook can access an Exchange server through a firewall using RPC over HTTP.

• You can protect against viruses, worms, and Trojan horses at the client, at the server, and at the firewall. You need to keep your software, operating system, and signature files up to date.

• You need to have a virus-clean policy in place before you are attacked.

• You can filter junk e-mail in Exchange Server 2003 and in Outlook 2003.

• You can protect user messages from interception and alteration by using encryption and digital signatures.

• You can delegate administration by creating administrative groups and assigning administrative roles.

• You should disable unnecessary services and audit activity on your virtual servers by using protocol logging.