I haveBarracuda Networks appliances, SPAM/Virusappliance and will be getting an Archive applianceas well, and a new installation of Exchange 2007 w/ SP1 for 500+ users. I have just the one Exchange server (muti-role) and my first inclination is to put the Barracuda(s) on my DMZ (I guess it wouldn't matter where the archive appliance goes). My other inclination is to relay mail outgoing from the Exchangethrough the archive appliance then back out through the SPAM/Virus appliance to ensure I'm not sending anything erroneous out as well as keeping my mail coming in and going out from the name. The end result is to have incoming mail cleaned,archived, and forwarded to the Exchange, and the reverse of mail going out; archived,and clean as it exits to the Internet. The question again is in regards toappliance placement...Is it worth putting one or both (Barracuda) in the DMZ?

You should treat them in your design as you would an Exchange 2007 Edge. http://www.microsoft.com/technet/community/chats/trans/exchange/07_0619_tn_exchange.mspx Devin L Ganger MVP (Expert):Q: We currently run a Barracuda spam filter. Would we see any benefit if we replaced it with an Exchange Edge server using Antigen or would we just waste the money on a Windows server license and Exchange 2007 license? The Barracuda has been pretty secure.A: The general rule of thumb in any question like this is: does your current solution meet your needs? If you're happy with your current levels of false positives and spam catches, and you don't have any pain points that the Edge Transport + Forefront solution will specifically address, then you probably should hold off on deploying Edge. BTW, you may need at least one for inbound and one for outbound, if you want to do anything fancy. The Barracuda Spam Firewall supports two operating modes: Inbound Mode (default) scans all incoming messages for viruses, custom policy, and spam probability to ensure that all email delivered to your users is virus-free and legitimate. In inbound mode, the Barracuda Spam Firewall also supports basic outbound mail scanning through the "Outbound Relay" tab for companies who simply need to perform virus checking, limited spam scanning capabilities, and appending of footers to outgoing mail. By default, Barracuda Spam Firewalls are configured for inbound mode when shipped Outbound Mode offers more advanced capabilities that include custom outbound mail policy, more comprehensive outbound spam scanning techniques, and outbound quarantine workflows for postmasters or compliance officers to sideline mail that violates policy. More advanced email applications may require deployment of separate Barracuda Spam Firewalls dedicated to inbound and outbound mail scanning.