Hi, We are looking to upgrade to Exchange 2007 and I have a query with regards to ActiveSync and OWA. Considering that we are a small company with a limited budget, what would be the best way to setup ActiveSync and OWA access? Is it best to have a seperate server running the Client Access role? Also, with regards to security are there any extra ports that need to be opened on the firewall and is a there anything more other than an SSL certificate required? Many thanks, D

Hello, While you certainly can separate your CAS on a different server, it is definitely not required and for a small business may be more trouble than its worth. It is certainly acceptable to deploy a single-server solution unless you have specific requirements otherwise. As far as ports to open for OWA and ActiveSync, it does depend on what you have in front of it. Are you controlling access with ISA Server or another proxy/security device? Anyway, you can expose OWA and ActiveSync over port 80 or 443 (obviously 443 strongly recommended). Please keep in mind that many ActiveSync devices are particular about the SSL certificates they encounter, so it is a good idea to get a well-known SSL certificate.

Hello, It's always the best practice if you set all Exchange 2007 server roles separately. If you have budget limitation, installing all roles in one server is ok. Regarding the port, if you would like to use pop3 or imap4, you also need to open according ports. I suggest you read the following article, it contains all information regarding ports in Exchange 2007: Data Path Security Reference http://technet.microsoft.com/en-us/library/bb331973(EXCHG.80).aspx Regarding the certificate issue, I suggest you use a SAN certificate, please refer to the following article: More on Exchange 2007 and certificates - with real world scenario http://msexchangeteam.com/archive/2007/07/02/445698.aspx Hope this helps. Thanks, Elvis

Any update on the issue? If so, please let me know.