Share via

How to make more secure Exchange 2019 OWA

Dmitry Horushin 61 Reputation points
2021-05-28T09:37:41.45+00:00

Hi,
We are currently using basic authentication / FBA for OWA, but it looks unsecure in the modern world.
What are best practices to secure OWA?

We tested 2 options:

Best regards,
Dmitry Horushin.

Exchange | Exchange Server | Management
Exchange | Exchange Server | Management

The administration and maintenance of Microsoft Exchange Server to ensure secure, reliable, and efficient email and collaboration services across an organization.

Answer accepted by question author

  1. Andy David - MVP 160.2K Reputation points MVP Volunteer Moderator
    2021-06-07T12:39:13.687+00:00
    0 comments

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andy David - MVP 160.2K Reputation points MVP Volunteer Moderator
    2021-05-28T11:02:00.613+00:00

    I would integrate with ADFS ( and use a MFA solution as well)

    1 person found this answer helpful.
  2. Andy David - MVP 160.2K Reputation points MVP Volunteer Moderator
    2021-06-07T11:41:17.62+00:00
  3. Dmitry Horushin 61 Reputation points
    2021-06-06T08:21:57.527+00:00

    Hi
    Thank you.
    My superior wants to test a configuration with Kerberos authentication when requests of external OWA users are accepted by Azure based proxy servers. He believes that this configuration is easy to configure and maintain that a configuration with ADFS and MFA. But we miss a documentation how to set up OWA with Kerberos.

    Our further steps:

    • set up an Azure proxy for external users;
    • set up a second Exchange 2019 server to see how it works with load balancer;
    • install the next Exchange 2019 CU and test how it affects the configuration.

    If you can help to find Microsoft recommendations/best practices how to secure Exchange OWA on-premises, it will be wonderful.
    Best regards,
    Dmitry Horushin.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.