Exchange Server Forums

OWA Security

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Outlook Web Access >> OWA Security

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

OWA Security - 6.Aug.2008 10:43:22 AM

jaxisland

Posts: 52
Joined: 17.Aug.2006
Status: offline

I currently have OWA setup on SSL, a unique port, and I require client certificates. Now Im trying to setup WM5, WM6, and a BlackBerry with email through the Exchange server. All 3 fail in my current setup, unless I uncheck the requirement for a certificate. Then all 3 work. Now without a certificate you cannot see the login page, but if I disable it to make the mobile phones work, the internet can see my OWA login page, is there something else I can do to secure but still have mobile email work?

Thanks.

Post #: 1

Featured Links*

RE: OWA Security - 6.Aug.2008 1:00:32 PM

a.grogan

Posts: 1887
Joined: 12.Apr.2005
From: London
Status: offline

Hiya chap, when you say that you are using a "custom" port - does that mean that you have changed it from 443?

Cheers

A

_____________________________

Andy Grogan
MSExchange.org Forums Moderator
For my general ramblings about Exchange please visit my blog:
W: http://telnetport25.wordpress.com/
M: manifoldmaster@gmail.com

(in reply to jaxisland)

Post #: 2

RE: OWA Security - 6.Aug.2008 1:23:06 PM

jaxisland

Posts: 52
Joined: 17.Aug.2006
Status: offline

Absolutely. In order to access the page you need

https://mydomain.com:#####/exchange

This isnt my issue though, Im trying to find a way to keep the level of security I have now with the certificate, but with using something else so mobile email works.

(in reply to a.grogan)

Post #: 3

RE: OWA Security - 6.Aug.2008 1:29:05 PM

a.grogan

Posts: 1887
Joined: 12.Apr.2005
From: London
Status: offline

I take it that OWA works fine?
Its been a while since I used a Windows Mobile device - but from recollection I do not recall them allowing you to set a custom SSL port - essentially they have a tick box that states something like "Use Secure Connection" - is this the case?

Have you tried the mobile devices as a test with the SSL certificate using port 443?

Cheers

A

_____________________________

Andy Grogan
MSExchange.org Forums Moderator
For my general ramblings about Exchange please visit my blog:
W: http://telnetport25.wordpress.com/
M: manifoldmaster@gmail.com

(in reply to jaxisland)

Post #: 4

RE: OWA Security - 6.Aug.2008 1:47:46 PM

jaxisland

Posts: 52
Joined: 17.Aug.2006
Status: offline

The custom port works fine. If I disable user certificates, everything works fine. If I enable it, they all fail.

My question is, Im looking for an alternative security measure for OWA

Thanks.

(in reply to a.grogan)

Post #: 5