Chapter 9. Managing Security in the Exchange Environment

Terms you'll need to understand:

• Firewall

• Packet filter

• Proxy

• Demilitarized zones (DMZ)/screened subnet

• Digital signatures

• Encryption

• Public Key Infrastructure (PKI)

• Certificate template

• Autoenrollment

• Permission

• Delegation

Techniques you'll need to master:

• Managing connections to Exchange Server 2003 across firewalls

• Managing the auditing settings of Exchange Server 2003

• Managing the audit logs of Exchange Server 2003

• Managing permissions in Exchange Server 2003

• Managing encryption for Exchange Server 2003

• Managing the use of digital signatures in Exchange Server 2003

• Understanding and responding to threats to security

This chapter deals with the exam topics that you will need to understand in regard to managing security in the Exchange Server 2003 environment. Security means different things to different people. When Microsoft speaks of managing security, they are talking about putting the necessary processes in place to ensure that an Exchange server is as secure as possible. Security does not just take the form of preventing third parties from gaining unauthorized access to the server, but also ensuring that communication is protected so that those third parties are unable to view messages transmitted across the network that are not intended for them. Security also takes the form of ensuring that administrators have only those rights that are necessary to perform their job function. It is easier to add permissions to administrators who actually require those permissions than it is to clean up after an administrator who should not have had a particular permission assigned to his account in the first place.