Exchange – Configuring Exchange 2016 ActiveSync in Edge Server

activesyncdmzexchangeexchange-server

Dears,

We currently have an Exchange 2016 Edge server located in our DMZ and it is handling all our inbound and outbound emails. I noticed that there is no Activesync service/role inside Edge server. I can only see it inside our internal mailboxes servers which are located in our private, LAN, network.

Is it possible to enable/install Activesync role inside Edge server? Because we do not want to expose our internal mailbox servers to the internet directly.

Regards,

Best Answer

Exchange Edge Transport servers only do mail flow (SMTP) and anti-spam protection.

If you want publish ActiveSync to the internet, then there are only two options for you:

  • forward HTTP and HTTPS ports on the firewall directly to Exchange servers (which you don't want to do)
  • install a reverse web proxy in your DMZ. Microsoft IIS + ARR or Microsoft WAP support HTTP(S) proxying and are free with Server OS. But any reverse web proxy will do.

I don't believe there is an official Microsoft documentation on how to configure IIS ARR or WAP to publish Exchange in DMZ. But you can easily find several unofficial how-to-s out there

Related Topic