What version of Exchange?
If you're using Exchange 2003 just use the RPC via HTTPS tunnel and you
only have to open 443.
You'll need to look on the Microsoft site for the document on how to
lock down the Exchange MAPI ports.
By default they're dynamic.
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf
> Of Daniel Samaan
> Sent: Tuesday, March 30, 2004 11:57 AM
> To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> Subject: [FW-1] Exchange and Outlook ports
>
> Can someone help explain what the MSExchange Group of service
> ports vs.
> adding tcp-high ports doesn't do?
>
> I noticed by adding MSexchange group also, inherently allows
> TCP-135 (epmap-135).
>
> I'm running AI
>
> thanks
>
> =================================================
> To set vacation, Out-Of-Office, or away messages, send an
> email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your subscription
> options, email fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|