Years ago I use to use Microsoft ISA Server. We are now looking to install Exchange 2010 and was looking at best practices to secure OWA, Activesync, and Outlook Anywhere. Past experience said use ISA server (which later became TMG) and now is UAG in the DMZ.
However pricing for the current UAG causes much pause... even for charity pricing which we get. I have looked for opensource solutions, but it seems the Outlook Anywhere piece is the fly in the ointment as most seem to have a problem getting this to work, but can get OWA and Activesync. If I end up with a reverse proxy system it needs to work for all features of Exchange 2010 and needs to simply work and not need babysitting.
This leads to the question... for a non-profit of 50 to 60 users how IMPORTANT is it to utilized product like TMG / UAG in DMZ for security???
Many have said just open port 443 to CAS server and keep things patched. Many feel the much less complicated environment for a small business may outweigh the risks if you are diligent with patches and updates.
I am not looking to start a war, but would like some experienced feedback.
Thanks,
Greg