OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Mark Parry (markfirstworld.net)
Date: Thu Aug 16 2001 - 20:43:54 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I think you need a VPN.

    Mark
    ----- Original Message -----
    From: "Stephen K. Watling" <steve.watlingneumark.com>
    To: <focus-mssecurityfocus.com>
    Sent: Thursday, August 16, 2001 4:47 PM
    Subject: Accessing Exchange 2000 Remotely

    We are running a MS Exchange 2000 server behind our firewall. We do not
    have any problems with our users accessing it from within our LAN (of
    course), however, we do have a number of employees who work remotely, at
    least part of the time. In order to accommodate them, we enabled
    Outlook Web Access across an SSL connection. Our remote users have
    requested that we go a step further and enable POP3 access to the
    system. Now, I am against doing this, because I question the security
    aspects of this. I have suggested we enable IMAP4 over SSL to allow
    remote access. However, our users are sticking to their guns on POP3
    access. We are working on implementing VPN access, but due to
    logistical constraints, we will not be able to implement it for a few
    months. We would like to find an interim solution as soon as possible.
    Question: What is the most secure/flexible method of accessing an
    Exchange 2000 server from across the Internet? Is there a more secure
    option that I just don't see?

    Thank you in advance for your assistance,

    Steve

    Systems Engineer

    Systems Engineer
    Neumark Technology Group, Inc.
    Phone: 630-505-3721
    Fax: 630-505-4999
    Mobile: 847-366-9088
    steve.watlingneumark.com
    www.neumark.com