You can use a fully qualifi ed domain name (FQDN), or even an
IP-based URL such as https://xxx.xxx.xxx.xxx/abcdef. If you use the former,
make certain that mail.yourdomain.com resolves to the appropriate IP address.
Securing the Outlook Web Access Interface
?› Use the Integrated Windows authentication, which is enabled by default. Login
names and passwords are not prompted, which allows for more of a secure
interface by having the client and server to negotiate.
?› Utilize the digital certifi cates; either create your own or purchase from a
third-party vendor.
360 Chapter 9 ??? Using Outlook Web Access through the Intelligent Application Gateway
Frequently Asked Questions
Q: Why is it necessary to use SSL/TLS to secure access to my Outlook Web Access
deployment?
A: To reduce the risk of exposing great deals of sensitive personal and/or proprietary
company information that is sent daily via the corporate e-mail system across
corporations.
Q: My system keeps prompting me that my encryption is not correct when I initiate
the OWA login process. How can I fi x this prompt?
A: The Web browser must be running 128-bit encryption.
Q: What??™s the most critical security issue I need to be concerned about when it
comes to setting up OWA on my Exchange server?
A: Authentication! OWA can perform authentication either by clear text mode or
utilizing the Integrated Windows Authentication by default. Obviously the clear
text mode is not recommended.
Pages:
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357