Re: Outlook Web Access!!
From: Ryan Ware (user@anydomain.com)
Date: 02/27/03
- Next message: Ryan Ware: "Re: Q191513 - If you read NOTHING else, please read this."
- Previous message: Sandra Sadsad: "Can't download execacutables from web"
- In reply to: Stephen O'Sullivan: "Outlook Web Access!!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Ryan Ware" <user@anydomain.com> Date: Thu, 27 Feb 2003 10:23:37 -0600
Make sure you look up all the alerts for your version of OWA, patch them. I
know in our 5.5 there was one vuln that wasn't patched the fix was to remove
a dll. This mades it so users can't change their passwords via OWA which
was probably dubious anyway. Also use all the IIS patches and lockdown tool
and the urlscan fix.
"Stephen O'Sullivan" <stevieo@eircom.net> wrote in message
news:u5c9T6l3CHA.1888@TK2MSFTNGP10.phx.gbl...
> G/day forum,
>
> Just want to ask is Outlook Web Access safe??
>
> We plan on deploying same but only after proving its security. IS there
any
> good guidelines i can follow that would aid me in my deployment, bear in
> mind that I've got a PIX as my firewall and a DMZ structure in place. I
also
> use MIMEsweeper which as my SMTP relay and screening server, this is set
up
> on my DMZ.
>
> Regards,
> Steve.
>
>
- Next message: Ryan Ware: "Re: Q191513 - If you read NOTHING else, please read this."
- Previous message: Sandra Sadsad: "Can't download execacutables from web"
- In reply to: Stephen O'Sullivan: "Outlook Web Access!!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
