You mean VA as in virtual appliance?? Remember, smg is just another mta using port 25! So in all cases, exchange and smg are separate vm’s. They can be on the same network segment. But again, the main purpose of smg is to be in the DmZ (Internet facing zone). Exchange goes into your internal network.