Hi My frontend exchange 2003 server is in DMZ . mY Backend server & Domain in Trsut network ( Inside ) I am using Netscreen Firewall . My topology as below BC SERER----SWITCH---- Bluecoat Proxy server---FW-(DMZ )----FE SERVER If my bluecoat is connected between switch & FW mY FE server is not able to communicate with BC & Domain server. I cannt open system admin tool from FE server . My mails not working .But I can able to ping both the server . if I remove Bluecoat Proxy server .My exchage works fine. Is this relating with RPC ,DSAcess ,netlogn service issue. Pls help me ?

There are a number of ports that will need to be opened between the Frontend and the backend and the frontend and the GCs. This article should get you going. http://support.microsoft.com/kb/280132/

I would highly suggest you put the Bluecoat device in front of the FE. Keep your FE on the same network as the BE and you won't have any problems. You should just have to open 443 to the FE reverse proxied thru Bluecoat. Thats how I am doing it!here is the config doc from Bluecoat.http://www.bluecoat.com/downloads/support/BCS_tb_securing_OWA.pdf#search=%22bluecoat%20%2B%20owa%22

I agree with the above, we had both FE and BE in the same site due to all the ports that were required to be open, not forgetting AD, DNS, 443, GC etc the llist goes on

Hi I cannot change my network topoligy. Can any you give me other solution. Regards Jitendra

If you cannot change the topology then the only option you have is to punch holes in the firewall. there are some documents on technet I beleive that cover this.

whats the point of the bluecoat device if you are throwing the FE in the DMZ. Take the bluecoat out of the loop.