Home / server / Questions / 1078644
Accepted
Aboodnet
Asked: 2021-09-26 07:02:02 +0800 CST

Exchange 2016 ActiveSync in Edge Server

  • 772

Dears,

We currently have an Exchange 2016 Edge server located in our DMZ and it is handling all our inbound and outbound emails. I noticed that there is no Activesync service/role inside Edge server. I can only see it inside our internal mailboxes servers which are located in our private, LAN, network.

Is it possible to enable/install Activesync role inside Edge server? Because we do not want to expose our internal mailbox servers to the internet directly.

Regards,

exchange dmz activesync exchange-server

1 Answers

  1. Best Answer

    Exchange Edge Transport servers only do mail flow (SMTP) and anti-spam protection.

    If you want publish ActiveSync to the internet, then there are only two options for you:

    • forward HTTP and HTTPS ports on the firewall directly to Exchange servers (which you don't want to do)
    • install a reverse web proxy in your DMZ. Microsoft IIS + ARR or Microsoft WAP support HTTP(S) proxying and are free with Server OS. But any reverse web proxy will do.

    I don't believe there is an official Microsoft documentation on how to configure IIS ARR or WAP to publish Exchange in DMZ. But you can easily find several unofficial how-to-s out there

    • 1