Should Exchange Be in Dmz?

Microsoft recommends that you place the Exchange Edge Transport server in DMZ network. Place it in a perimeter network that's outside of your organization's internal Active Directory forest. ... Also, between the Edge Transport server and your internal Exchange organization.

What servers should be in the DMZ?

Any service provided to users on the public internet should be placed in the DMZ network. External-facing servers, resources and services are usually located there. Some of the most common of these services include web, email, domain name system, File Transfer Protocol and proxy servers.

Why you shouldn't use DMZ?

These servers and resources are isolated and given limited access to the LAN to ensure they can be accessed via the internet but the internal LAN cannot. As a result, a DMZ approach makes it more difficult for a hacker to gain direct access to an organization's data and internal servers via the internet.