cya securing exchange server 2003 and outlook web access phần 1 doc

[...]... Browse, and Execute Permissions 10 0 Connection Limits 10 1 Enabling SSL on OWA 10 3 Installing the Microsoft Certificate Service 10 4 Creating the Certificate Request 10 8 Third-Party Certificates 11 6 Restricting User Access 11 6 Disabling OWA Access for a Specific User 11 7 Disabling OWA Access for a Server 11 9... Web Beacon Blocking Enhanced Attachment Blocking Forms-Based Authentication Username and Password Clients: Premium and Basic Security: Public or Shared Computer and Private Computer Your A** Is Covered If You … 16 2 16 3 16 4 16 4 16 6 16 8 17 0 17 3 17 3 17 4 17 7 Chapter 8 Exchange. .. Servers According to Server Roles Security Issues Related to All Server Roles Securing Domain Controllers Securing File and Print Servers Securing DHCP, DNS, and WINS Servers Securing Web Servers Securing Database Servers Securing Mail Servers 292 292 292 293 297 298 300 3 01 302 303 Index 305 About the Series... mentioned that Exchange Server 2003 is the most secure Exchange version released to date, but bear in mind that to achieve the most secure Exchange 2003 environment possible, Exchange 2003 must be installed on a Windows 2003 server We say this because it’s also possible to install Exchange 2003 on Windows 2000 (SP3) server Because Windows 2003 Server has been through a full code review and has been designed... resident Exchange mailboxes Antivirus products are allowed to delete messages and send messages to the sender in the Exchange 2003 AV API 2.5 version ■ Clustering authentication Exchange Server 2003 clustering supports Kerberos authentication against an Exchange virtual server ■ Administrative permissions Cross-forest support and the ability to administer both Exchange 2000 Server and Exchange Server 2003. .. responsibly.You need to CYA CYA: Securing Exchange Server 2003 and Outlook Web Access is part of the new CYA series from Syngress that clearly identifies those fea­ tures of Exchange/ OWA that represent the highest risk factors for attacks, performance degradation and service failures; and then walks you through step-by-step configurations to assure they have been thor­ ough and responsible in their... 13 3 Deploying a Single -Server Scenario 13 4 Deploying a Front-End/Back-End Scenario 13 6 HTTP Authentication 13 6 Using Dual Authentication 13 7 Using Pass-Through Authentication 13 8 Securing a Front-End Server 13 9 Disabling Unnecessary Front-End Services 14 0 Dismounting and Deleting the Mailbox Store 14 1 Dismounting and Deleting... Publishing the Exchange 2003 Services 15 3 Message Screener 15 4 OWA 2003 Publishing 15 4 More ISA Server Information 15 5 Your A** Is Covered If You… 15 6 Chapter 7 Outlook Web Access Client Security Features 15 7 In this Chapter 15 7 S/MIME Support 15 8 Contents Junk... Baseline Security Analyzer V1.2: www.microsoft.com/technet/security/tools/mbsawp.mspx To download a copy of MBSA 1. 2, visit Microsoft Baseline Security Analyzer V1.2 at www.microsoft.com/technet/security/tools/ mbsahome.mspx#XSLTsection12 412 112 012 0 11 12 Chapter 2 • Windows and Exchange 2003 Security Practices Network Security Hotfix Checker (Hfnetchk) The Hfnetchk tool is a command-line tool that administrators... Security • Chapter 1 Outlook Web Access 2003 Security Enhancements One of the components in Exchange 2003 that has benefited from a complete update, in terms of both functionality and security improve­ ments, is Outlook Web Access (OWA) OWA now supports S/MIME, just like the full Outlook MAPI client.This is a big improvement because it allows you to digitally sign and encrypt e-mail messages and attachments . 299 _CYA_ EXCHG_FM.qxd 4/23/04 3:52 PM Page ii 299 _CYA_ EXCHG_FM.qxd 4/23/04 3:52 PM Page iii Securing Exchange Server Securing Exchange Server 2003 and Outlook Web Access 2003 and Outlook Web Access COVER. help and a fail-safe checklist that guarantee that you’ve configured your network professionally and responsibly.You need to CYA . CYA: Securing Exchange Server 2003 and Outlook Web Access. . . .298 Securing DHCP, DNS, and WINS Servers . .300 Securing Web Servers . . . . . . . . . . . . . . . .3 01 Securing Database Servers . . . . . . . . . . . . .302 Securing Mail Servers .