RE: OWA security

From: Michael Dunn (MDunn_at_sscincorporated.com)
Date: 12/15/03

  • Next message: Chris Burton: "Re: Security scanning tools" 
    Date: Mon, 15 Dec 2003 14:38:40 -0500
To: "Beverly Kittens" <beverlykittens@hotmail.com>

    Check out isaserver.org.

    You may or may not be using ISA server as your firewall, but in either case, there are several articles on 'best practices' for securing an IIS/OWA server.

    Regards,

    -Mike

    -----Original Message-----
    From: Beverly Kittens [mailto:beverlykittens@hotmail.com]
    Sent: Monday, December 15, 2003 10:32 AM
    To: security-basics@securityfocus.com
    Subject: OWA security

    Hello list

    My company is currently implementing OWA to provide users with access to
    email from any Internet machine. I'd like to see the OWA server in a DMZ,
    but this is currently up for discussion. Sometimes operational stuff gets
    in the way of security....

    Can anyone point me at a paper that describes the security implications of
    OWA, particularly the network related issues please. I'd also be interested
    to learn the difference between OWA and POP architecture.

    Thank you

    _________________________________________________________________
    Use MSN Messenger to send music and pics to your friends
    http://www.msn.co.uk/messenger

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

  • Next message: Chris Burton: "Re: Security scanning tools"

    Relevant Pages

    • Re: OWA and Remove Unused Script Mappings
      ... script mappings, I also hope that you understand that Security is not a ... Suppose an security checklist came down that said "the best way to secure ... security on your server, so you went and powered it off. ... push the power button to repower your server, and OWA worked as usual. ...
      (microsoft.public.inetserver.iis.security)
    • RE: OWA security
      ... If you are serious about security you shouldn't use HTTP for OWA access ... Well if you are adding a separate web server into the network, ... Internet to the web server, and from the web server to the internal ...
      (Security-Basics)
    • RE: Overall security of my MS based network
      ... I've just gone through the process of implementing OWA here in our financial ... the server was as locked down as it can get to avoid being massacred by our ... You can use security templates with Win2k to define a policy that is very ... Securing Windows NT/2000 Servers for the Internet, Stefan Norberg, ...
      (Focus-Microsoft)
    • OWA hangs on Loading
      ... OWA hungs in loading View this article only ... to OWA on the mailbox server from the mailbox server. ... 290177 XCCC: Browser May Not Display OWA Icons When Exchange 2000 Is Behind ...
      (microsoft.public.exchange2000.general)
    • Re: Cannot reply/forward in OWA - Page cannot be displayed
      ... I understand all the pictures in the OWA ... Check if OfficeScan is installed on the SBS server. ... Microsoft is providing this information as a convenience to you. ... Locate the Urlcache folder. ...
      (microsoft.public.windows.server.sbs)