We have an Astaro box sitting on the perimeter of our network acting as an smtp proxy for Exchange. Our MX record points to this box. I am in the process of configuring the box to act as a filtering web proxy in addition to its smtp role. I would like to have the granularity of assigning different profiles to different AD user groups on the Astaro box in order to provide different levels of filtering based on job function. Of course, I can apply the proxy via group policy, but I would loose the granularity of assigning profiles.
I am asking opinions on the security risks I am taking by joining the Astaro box to my AD domain. My experience tells me it's never a good idea to join something on the perimeter of a network to a domain. Thoughts?
This thread was automatically locked due to age.
