Hate to get all retro here, but i must. Hopefully this is a pretty easy answer. Single Exchange 2003 SP2 server running on windows 2003 R2 - this machine is an internally addressed machine, with no direct access from the internet (it's fronted by two ironport public servers) We currently host our own BES and the powers that be, want to look at moving from our berrys to iphones. I've read a bunch of docs, and it looks pretty straightforward, just have a question. Since our exchange box doesn't currently have direct access from outside, i guess i have two choices: Add a public static NAT to our internal exchange box - easily done, but is this a good idea. This machine is patched and everything, but it is a domain member and typically with all the MS networking stuff on it, probably not as hardened as it should be. Put a machine in our DMZ that would handle the connectivity from the outside\inside to our exchange machine - is this even doable? What components would have to be installed on it? thanks. Danny

Hello, I would choose the second option and deploy an Front-end Exchange Server. Thanks, Simon