Would it not be a security risk to have phones connecting directly to our Exchange server rather than a front end server in a dmz? Also, we'd need to disable SSL on the Exchange Virtual Directory; would this cause the communications between the handsets and Exchange to be un-encrypted? Any advice would be appreciated! Thank you :)