Microsoft Exchange Server is a widely used email server that is used with all versions of Microsoft's Outlook, Entourage, IMAP, and POP3 clients. It is also used to host Microsoft's Office 365 cloud offering.
6
votes
3answers
2k views
Is it possible for a phishing link to install a major virus on a Mac?
My girlfriend recently had her university MS Exchange account hacked. The attacker took over her email account and started using it to send thousands of spam emails. After a while, her email account ...
6
votes
1answer
101 views
What are concerns with storing passwords in a restricted public folder on exchange?
Is it safe to store data such as account log-in information (for vendor websites, not administrative accounts), settings policies, activation documentation, and operating system keys in a public ...
6
votes
1answer
186 views
What is the security impact of changing PowerShell's PSLanguageMode?
A vendor is asking me to change the PSLanguageMode from within IIS on my Exchange server(s).
What potential vulnerabilities am I opening myself up to?
I'm surprised to see this option present within ...
5
votes
4answers
463 views
Non-repudiation in Exchange/Outlook without Digital Signatures
Scenario: Acme Corp. needs to collect evidence to support their side of a case in court. Part of this evidence may include e-mail messages. Certain employees who do not have administrative access ...
4
votes
3answers
136 views
Allow a PA to see a director's emails, but keep some emails private
We have a problem with email potentially being viewed by directors PAs, which we need to protect, the situation is as follows:
Director A wants to send an email to Director B, both director A and ...
2
votes
1answer
50 views
What is the purpose of the hashcode used in Exchange OWA HTTP requests?
This blog describes the URLs that are used in OWA and webservices. It also says that there is a hashcode that is used in conjunction with the throttling policy.
Is this hashcode responsible for ...
2
votes
2answers
165 views
Suspect Exchange Server appears to be hacked. How to determine if it was a false positive?
Our security vendor detected that our client's CAS server was doing a nessus scan in the internal network.
It's not uncommon for this vendor to issue a false positive, but I'm looking for general ...
2
votes
1answer
241 views
Does the Windows Surface RT or Pro (Windows 8) support local encryption of Activesync data?
Our company policy is requires the local encryption of data for all email (in case the device is stolen)
Does the Windows Surface (either version) support local encryption?
Is the local device ...
2
votes
2answers
225 views
How to investigate possible illegal access by a staff member to emails?
At work we use Outlook 2010 (I think) and an exchange server.
The situation is simple: Our IT Manager (Steve) was fixing a problem one of the guys out in the field (Dave) was having with email on ...
1
vote
2answers
98 views
What threats are posed by SSL connections?
I'm working on implementing an Exchange 2010 solutions which includes Outlook Web Access, Exchange ActiveSync and Outlook Anywhere. These services use SSL and would be presented on the Internet so our ...
1
vote
3answers
517 views
OWA Keep-Alive in http, even though it should be forced https
Yesterday, I got an alert from a client's IDS that a Base64 auth packet was detected. Looking at the Ascii decode, I can see that it is for their OWA (Outlook Web Access), and indeed, the auth info ...
1
vote
1answer
74 views
How effective is Activesync Certificate revocation using CRL or OCSP
We determined that a number of our account lockout issues are related to Activesync devices using old/expired passwords.
One way to remedy an account lockout issue is to issue and deploy certificates ...
1
vote
1answer
92 views
Should the email server/application be protected by 2 factor authentication? What applications should be protected?
When should email be protected by 2 factor authentication?
Suppose a given company is in an industry where two factor authentication is offered to some or all of its clients. Does this mean that it ...
1
vote
2answers
322 views
How secure is Goodlink for mobile phones when compared to Activesync?
Some of our more technical users are arguing to use Activesync for their phones, while the corporate standard is limited to Blackberry and any device that supports Goodlink.
One argument is the ...
0
votes
3answers
435 views
To DMZ, or not to DMZ
So for an assignment, we need to create a scheme (and eventually also the set-up) of a couple of servers in a network.
The 'networks' are:
Internal network
DMZ
The internet
And the servers we ...
0
votes
2answers
501 views
List of unpatchable exploits in MS Exchange 2003 [duplicate]
Possible Duplicate:
Where can I find a list of un-patched CVEs for a specific piece of software?
MS Exchange 2003 is no longer supported by Microsoft since April 2009.
However the ...
0
votes
1answer
199 views
block changing IP addresses on port 25 SMTP
A script is currently being run against my exchange server attempting to access resources on port 25 SMTP. This is generating event 4776 within Windows event logs. How can I stop this? Would I need to ...
0
votes
0answers
83 views
What does it mean when a message's contentes are replaced by “Malware name: 'EngineError'” [duplicate]
Possible Duplicate:
Does a blocked email with a malware name “EngineError” indicate a flaw in Forefront Protection?
A privious post on this topic was closed as "unlikely to ever ...
