Layout for PMG, Exchange and Active Sync

[larsen]

Hello,

we are currently running a local Exchange installation. Mail is fetched via Popcon (so there is an annoying delay when receiving mails). Active Sync is possible through Port Forwarding on our firewall to the Exchange host (access is restricted to our VPN and some IP ranges of carriers for mobile access).

Of course, not the setup you would want to use today. I plan on using PMG and making it possible to instantly receive mails.

I don't have much experience in this field. What would be the best way to configure things to have mails delivered directly to PMG and still be able to use Active Sync on Exchange?

Firewall
 |
 |---  DMZ (Orange)
 |     |
 |     |----- PMG
 |     |----- Exchange
 |
 |- Switch (Green)
        |----- local network

- PMG would use the external ports 25, etc.
- PMG would forward mails to Exchange
- Exchange would use the external ports for Active Sync
- Outlook-clients would connect to Exchange from Green into the DMZ
- There would be no traffic from DMZ into Green

Is this feasible?

 

[hata_ph]

Yes. Thar is how PMG work and I assume PMG will handle incoming and outgoing mail for your exchange. You can refer to PMG documentation for reference.
PMG do not handle Active Sync, you still have to direct connect to your exchange for it.

https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html

 

[larsen]

After some more reading I learnt that it would be a bad idea to put an Exchange server into the DMZ (as it needs a connection to the DC (amongst others)).

So, will have to find out how to proxy Active Sync. Anyone using this?