I have a network architecture that needs to be redesign to fulfill some needs.
Need:
Webserver need to proactively notify exchange server to send out email message
Current architecture:
Exchange and Database server behind firewall, Webserver ouside firewall.
Webserver are not able to communicate with exchange server unless a dedicated port is open.
Alternative design:
Exchange, Database server, and Webserver all behind firewall.
Open a port for public user to access the web server.
1. Which architecture is better?
2. In either design, how should the web server communicate with the exchange server while maintaining high security protecture?
3. In either design, what other security threats should be taken into consideration? and what are the solution to it?
...
Go to the complete details ...