Securing multiple protocols (HTTP, POP3, IMAP4)

TheMSsForum.com: The Microsoft Software Forum

Hi,

I'm setting up a new Exchange 2003 server. The users want to be able to
use OWA, POP3 and IMAP4 for outside access. For obivous reasons I want
to add some measure of security on the server. I know how to secure the
communication by adding a certificate, but do I have to have a
certificate per protocol?

Kind regards,
Gaute
Top

Re: Securing multiple protocols (HTTP, POP3, IMAP4) by Paul

Paul
Tue Aug 23 10:14:08 CDT 2005

In article <1124800425.382263.161780@o13g2000cwo.googlegroups.com>,
"GB" <orgabeke@gmail.com> wrote:

> Hi,
>
> I'm setting up a new Exchange 2003 server. The users want to be able to
> use OWA, POP3 and IMAP4 for outside access. For obivous reasons I want
> to add some measure of security on the server. I know how to secure the
> communication by adding a certificate, but do I have to have a
> certificate per protocol?

No, you can use one cert for OWA, IMAP, POP, and NNTP. When you click on
the Certificate button on the Access tab of the virtual server
properties dialog, you'll see that you can request a new cert or use an
existing cert for each protocol.

Don't forget to turn off non-SSL access, too, or your users are likely
to not use the SSL version.

Blatant plug: I cover this stuff in great detail in _Secure Messaging
with Exchange Server 2003_. See http://www.e2ksecurity.com for sample
chapters and ordering info, or just hit
<http://www.amazon.com/exec/obidos/ASIN/0735619905/robichaassocia>

Cheers,
-Paul

--
Paul Robichaux <paulr@mvps.org>
MVP - Exchange
Exchange security book: http://www.e2ksecurity.com
FAQs: http://www.swinc.com/resource/exchange.htm &
http://www.swinc.com/resource/e2kfaq.htm
Top

Re: Securing multiple protocols (HTTP, POP3, IMAP4) by GB

GB
Wed Aug 24 01:57:56 CDT 2005

Thanks Paul. That was the answer I hoped for.

Regards,
Gaute

Top

Re: Securing multiple protocols (HTTP, POP3, IMAP4) by Ed

Ed
Fri Sep 16 18:28:56 CDT 2005

Hi,

I'm trying to setup an Exchange 2000 server to use SSL for POP and IMAP. I
already have it using SSL for OWA. When I go into the virtual servers for
the other protocols, the Certificate button is greyed out... Any ideas why,
and how to fix it?



"Paul Robichaux [MVP]" wrote:

> In article <1124800425.382263.161780@o13g2000cwo.googlegroups.com>,
> "GB" <orgabeke@gmail.com> wrote:
>
> > Hi,
> >
> > I'm setting up a new Exchange 2003 server. The users want to be able to
> > use OWA, POP3 and IMAP4 for outside access. For obivous reasons I want
> > to add some measure of security on the server. I know how to secure the
> > communication by adding a certificate, but do I have to have a
> > certificate per protocol?
>
> No, you can use one cert for OWA, IMAP, POP, and NNTP. When you click on
> the Certificate button on the Access tab of the virtual server
> properties dialog, you'll see that you can request a new cert or use an
> existing cert for each protocol.
>
> Don't forget to turn off non-SSL access, too, or your users are likely
> to not use the SSL version.
>
> Blatant plug: I cover this stuff in great detail in _Secure Messaging
> with Exchange Server 2003_. See http://www.e2ksecurity.com for sample
> chapters and ordering info, or just hit
> <http://www.amazon.com/exec/obidos/ASIN/0735619905/robichaassocia>
>
> Cheers,
> -Paul
>
> --
> Paul Robichaux <paulr@mvps.org>
> MVP - Exchange
> Exchange security book: http://www.e2ksecurity.com
> FAQs: http://www.swinc.com/resource/exchange.htm &
> http://www.swinc.com/resource/e2kfaq.htm
>
Top