Re: Sharepoint servers and Exchange servers

[Shane Bishop <shanebishop () JALC EDU>]

Both of these technologies have the option to utilize front end servers for authentication and authorization to the 
backend services. You can put your front end servers in a different zone than your backend services which would 
mitigate the chances of a security incident. Instead of configuring the firewall around the services, accommodate your 
current security architecture by putting the front end servers and users an arm's distance away from the Sharepoint 
SSP's and exchange mailbox stores.

Shane Bishop
Associate Director of Network Infrastructure
John A. Logan College
CISM, CISSP
http://shanebishop.info
(618) 985-3741 Ext. 8544


________________________________

From: Cheek, Leigh [mailto:lcheek () UTK EDU]
Sent: Wed 2/6/2008 3:29 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Sharepoint servers and Exchange servers



Is having Sharepoint servers and Exchange servers in the same firewall
zone a wise security choice?  Because the access level will be different
for those two types of systems, I am of the opinion that you would be
unnecessarily opening your Exchange servers to greater risk. What do you
think? What other risks or advantages do you see to being in the same
zone?

Thanks,
Leigh Cheek, CIA, CISA
Auditor
Audit and Consulting Services
University of Tennessee
149 Conference Center Building
Knoxville, TN 37996-4114
(865) 974-4420
fax (865) 974-6171
lcheek () utk edu