We are upgrading Exchange 2003 to Exchange 2010. We will be using the proxy/reverse proxy features of our Cisco ASA firewall to front-end webmail access from staff home computers to our internal Exchange 2010 server. This has been successfully tested. The Cisco firewall prompts the webmail user for their account/password, authenticates against AD, and if successful proxies the connection to the internal Exchange server and logs them on. Only traffic from authenticated users get past the firewall and is proxied to our internal network.
Now we would like to provide similarly secure access for mobile devices that use ActiveSync. Does anyone know if a Cisco firewall can be used to authenticate ActiveSync traffic prior to letting it through to the internal network and the Exchange 2010 server.
This is necessary because of our security policy requires that all unsolicited traffic from the internet must be authenticated prior to forwarding to any internal or extranet network.