Does anyone know what the best practice is for deploying OWA, should we put the CAS in the DMZ or just have the firewall NAT to it internally? Thanks

Hi,Actually CAS is not designed to put in DMZ, the only server should be in DMZ is Edge Transport server. Best parctice is to publish CAS features (OWA) using application-aware or application-layer firewall/SSL VPN like ISA Server.Nice discussions on "why not CAS in DMZ?":http://exchangepedia.com/blog/2007/05/cas-in-dmz-redux-time-for-owa-appliance.htmlhttp://smtp25.blogspot.com/2008/08/placing-cas-client-access-servers-in.htmlReferences on publishing OWA with ISA 2006:Using ISA Server 2006 with Outlook Web Accesshttp://technet.microsoft.com/en-us/library/aa996545.aspxPublishing Exchange 2007 OWA with ISA Server 2006http://www.msexchange.org/tutorials/Publishing-Exchange-2007-OWA-ISA-Server-2006.htmlAmit Tank || MVP - Exchange || MCITP - Exchange 2007 || http://ExchangeShare.WordPress.com