Sure, it's fine. But it's only the first application that users will be
asking for. Pretty soon, you'll be poking all sorts of holes in your
firewall. I think just doing the VPN thing makes everything so much easier.
Ed Crowley MCSE+Internet MVP
Tech Consultant
Compaq Computer Corporation
All your base are belong to us.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ryan Malayter
Sent: Monday, August 13, 2001 4:53 PM
To: Exchange Discussions
Subject: RE: SSL Question
OWA over SSL is a pretty damn secure option if you require 56+ bit
encryption, configure the IIS box correctly, and keep up to date on IIS
security patches. Most significantly, it requires no configuration on the
client. You can use OWA over SSL from any CyberCafe or web kiosk in the
world, all for the low, low price of a Verisign certificate.
Why is that stupid? I'd call it a capable, cost-effective solution.
If I took away OWA and made everyone carry a laptop and do VPN... well, the
CEO would crush me like a bug.
-ryan-
-----Original Message-----
From: Ed Crowley [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 13, 2001 6:35 PM
To: Exchange Discussions
Subject: RE: SSL Question
No. You're stupid not to be employing a VPN.
Ed Crowley MCSE+Internet MVP
Tech Consultant
Compaq Computer Corporation
All your base are belong to us.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Robert Moore
Sent: Friday, August 10, 2001 6:58 AM
To: Exchange Discussions
Subject: SSL Question
Hello all--
We currently don't use SSL for our remote OWA transactions, though we do use
Windows Integrated Authentication to encrypt passwords. We are not carrying
on communication which it's critical to have encrypted, so I made the
judgement that encrypting everything wasn't worth the overhead of SSL.
So, I guess my question is, Is that judgement wrong? Are we really stupid
not to be using SSL on OWA?
Rob
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Rob Moore
Network Administrator
The Agnes Irwin School
[EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
