CYA Securing Exchange Server 2003

by Mark Fugatt, Henrik Walther, Pattrick Santry

Overview

A highly portable, easily digestible road-map to configuring, maintaining and troubleshooting essential Exchange Server 2003 features. The book is organized around the 11 "MMCs" (Microsoft Management Consoles) that contain the configuration menus for the essential features. The options within each menu are explained clearly, potential problems are identified up-front, and configurations are subsequently presented in the aptly named "By the Book" section for that MMC. Readers will also appreciate the "Reality Check" sidebars throughout, which present valuable cost/benefit analyses of situations where there is no single "right" answer.


* Walks the reader through step-by-step configurations to assure they have been thorough and responsible in their work
* Clearly identifies those features of Exchange Server 2003 that represent the highest risk factors for attacks, performance degradation and service failures
* CYA comes right out and says what most IT Professionals are already thinking

Product Details

ISBN-13:	9781931836241
Publisher:	Elsevier Science
Publication date:	06/09/2004
Pages:	352
Product dimensions:	6.00(w) x 9.00(h) x 0.70(d)

About the Author

Henrik Walther is a Senior Microsoft Server Consultant working for an IT outsourcing services company in Copenhagen, Denmark. Henrik has over 10 years of experience in the industry. He specializes in migrating, implementing, and supporting Microsoft Windows Active Directory and Microsoft Exchange environments.

Henrik is a Microsoft Exchange MVP (Most Valuable Professional). He runs thewww.exchange-faq.dk website and writes Exchange-related articles for both www.msexchange.org and www.outlookexchange.com. He also spends time helping his peers in the Exchange community via forums, newsgroups, and mailing lists.

Patrick J. Santry (MCSE, MCSA, MCP+SB, A+, i-NET+, CIW CI) is the Microsoft Practice Lead for Sogeti USA in Cleveland, Ohio. He specializes in developing web solutions, and supporting infrastructure. Patrick has written on several books and magazine articles on Microsoft technologies. In addition, he has been awarded the Microsoft Most Valuable Professional (MVP) Award in the field of ASP/ASP.NET for the past three years and runs a popular website for ASP.NET web developers (www.wwwcoder.com).

Table of Contents

Coverage includes: Exchange 2000 Administrative Rights, Mailbox Rights, Denial of Service and Exchange, Types of File Vulnerabilities, Vulnerability of Transmitted Data, Message Authenticity, Event Service and Event Sinks, Message Relay via SMTP, Preventing Exchange Security Problems, The W2K/IIS Platform Must Be Solid, Dedicate Servers to Specific Functions, Disable Unnecessary Services, Tightening Mailbox Security, Enabling SSL for Internet or Remote Clients, Locking Down an IIS/OWA Server, Imposing Limits, Protecting Critical Files, Network Analysis Risk Reduction, Denying Client Access, Stopping Viruses, Exchange 2000 and Firewalls, SMTP Security, Auditing for Possible Security Breaches, Windows 2000 Event Auditing, Exchange 2000 Event Auditing, Logging Internet Client Access, Securing MAPI Clients, Enabling Message Encryption (S/MIME)

Editorial Reviews

The Barnes & Noble Review
If your Exchange Server 2003 messaging system is ever attacked, you know what’ll happen next: You’ll get blamed. Keep that from happening, with this concise guidebook. Here are step-by-step techniques and checklists for making sure you’ve covered all your bases with both Exchange 2003 and Outlook Web Access.

Walk through this book and follow its best practices for patch management, policies, mailbox and public permissions, and SMTP authentication and relaying. Check Outlook Web Access security in both front-end and back-end deployments and, of course, on the client. Set up spam filters, virus protection, and encryption. Finally, get your arms around the Exchange auditing process (including relevant Windows 2000/2003 event auditing). No security is perfect, but these techniques can get you a whole lot closer. Bill Camarda

Bill Camarda is a consultant, writer, and web/multimedia content developer. His 15 books include Special Edition Using Word 2003 and Upgrading & Fixing Networks for Dummies, Second Edition.

bn.com