I have a Windows Server 2003 box sitting behind our corporate firewall. The server is running Exchange 2003 Standard with IIS installed for Outlook Web Access (OWA). This is the only thing that IIS is used for on this box. We recently implemented Certificate Services on this box to install an SSL certificate to secure our OWA. In my firewall, I know I need to forward port 25 (SMTP) traffic to the Exchange server. My question is, in order for users to access OWA from outside the corporate LAN using the SSL certificate, would I need to forward JUST SSL traffic (port 443) to the Exchange server or would I still need to forward web traffic (port 80) as well? I'm pretty sure that I need to forward both port 80 and 443, but I'd like to make this as secure as possible.

Normally it should work, by forwarding only port 443. Ok, the users have to access the OWA via https instead of http but it should work. Paul