RE: OWA
I thought that if owa was thru the SSL certificate that there was no left over garbage for anyone to find or get!?! Is that not true... Inquiring minds and all that. Well, and that is why I set it up that way and nice to know if I made a mistake. Felis demulcta mitis ... Alan G. Monaghan [ MCSE+I - Win4.0/ MCSE - Win2k/ BJCP # C0389(Recognized) Ò¿Ó¬ ] Systems Administrator Gardner Publications, Inc. *Phone .. 1-513-527-8867 *Fax 1-513-527-8801 *Cell ... 1-513-378-0919 *E-mail . al...@gardnerweb.com *URL http://Bullwinkle.GardnerWeb.Com/ -Original Message- From: Fogarty, Richard R CTR USA USASOC [mailto:rick.foga...@us.army.mil] Sent: Monday, March 09, 2009 9:31 AM To: MS-Exchange Admin Issues Subject: OWA We're currently running a hefty E2k3 environment. Currently, our customers only have access to their e-mail (when outside our infrastructure) by using the existing terminal server - which can only be accessed through the VPN. I'm proposing (through an impact assessment) that we view the possibilities of providing access without using the following methods. I've come up with two possibilities: 1.)OWA 2.)RPC over HTTP For quite some time, OWA has not been authorized. It appears that there are some valid points - and some control issues that have taken it off the table. Since our customers have the ability to work with some sensitive documents, OWA has always been discounted due to the possibility of a customer opening up a sensitive document on a public computer. I'm not aware of any way to delete all of the cache after the docs have been downloaded on said public computer. In fact, it doesn't even have to be public, it could be the customers home computer as well. In either case, there are valid concerns. Apparently, our infrastructure guys (for some reason) believe pulling OWA into the mix would create a huge task to redesign our infrastructure. So, to accommodate them, I recommended using RPC over HTTP when using the VPN. This way, anyone that has a travel approved laptop, still has the ability to pull down their mail - to their system, and not be bothered with the TS. So, essentially, connect to the VPN - get your mail, disconnect - work, reconnect and send all your mail. A bit of a pain, but a compromise nonetheless. While attempting the Impact Assessment, it was brought up that many other similar units that have similar customers provide OWA as a service. During the review processes of this IA, my boss asked, ok, if OWA isn't recommended here due to security concerns - how can XXX unit get by with it? I can't speak about the other security personnel, but I do have some concerns about the left over garbage once a user is done on a computer. Is OWA still considered a security risk? How do others ensure documents read on a public computer are not left over for others to view? Comments? Thanks Rick ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Email Archiving Solutions
We are running the eVault product here. Been in for about 6 months. Not as seamless as they let on but for the most part, one nice product. We paid for professional services to help us design the server(s) needed to implement it into our environment. We are also using the full journaling features for legal reasons. The one thing is that there is an install for Outlook that is needed to help my end users manage the system along w/ some fine tuning for the OWA portion. This also does not work well for the mac users unless they are running some type of XP emulator for the office applications. Felis demulcta mitis ... Alan G. Monaghan [ MCSE+I - Win4.0/ MCSE - Win2k/ BJCP # C0389(Recognized) Ò¿Ó¬ ] Systems Administrator Gardner Publications, Inc. *Phone .. 1-513-527-8867 *Fax 1-513-527-8801 *Cell ... 1-513-378-0919 *E-mail . al...@gardnerweb.com *URL http://Bullwinkle.GardnerWeb.Com/ -Original Message- From: John Bowles [mailto:john_bow...@yahoo.com] Sent: Tuesday, March 03, 2009 3:48 PM To: MS-Exchange Admin Issues Subject: Re: Email Archiving Solutions I've taken a look at both and they both seem quite simple.. but who has had some working experience with any of these two? As for anything it can do anything you want it to do and more.. but when you actually implement it you discover pains and bugs etc and it's not as great is you thought it was going to be when you looked at it on the website. Know what I'm saying? Thank you, _ John Bowles From: Michael B. Smith mich...@theessentialexchange.com To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com Sent: Tuesday, March 3, 2009 11:43:25 AM Subject: RE: Email Archiving Solutions The list host's SEA should be a definite look-see. I'd also recommend you take a look at Red-Gates new solution. It's drop-dead EASY. http://www.red-gate.com/products/Exchange/index.htm From: John Bowles [mailto:john_bow...@yahoo.com] Sent: Tuesday, March 03, 2009 11:39 AM To: MS-Exchange Admin Issues Subject: Re: Email Archiving Solutions Basic requirements are as follows: - User base is 5-600 users -PST Archiving is a must -Seamless integration to Outlook clients That's all I have for now, this is a customer of ours and I haven't been onsite for an assessment yet. Thanks again, _ John Bowles From: Don Ely don@gmail.com To: MS-Exchange Admin Issues exchangel...@lyris..sunbelt-software.com Sent: Tuesday, March 3, 2009 11:27:38 AM Subject: Re: Email Archiving Solutions How big is your environment? How many users, how big are your databases now? What are your business requirements? On Tue, Mar 3, 2009 at 8:15 AM, John Bowles john_bow...@yahoo.com wrote: All- I've been tasked to find some email archiving solutions for our company. Besides Evault from Symantec which ones do you guys/gals recommend? I'm trying to gather a list of 5 different vendors so I can do a thorough eval of all of them. TIA, _ John Bowles ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
