Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Secure Internet Access to Kerio
  •  
gregwhite886

Messages: 6
Karma: 0
Send a private message to this user
Please excuse my ignorance. I run Kerio as an internal mailserver on my company network relaying to an exteral ISP. I need to allow my roaming users access from the Internet to Kerio webmail but ensure tight security. What is the best way to go about this? Any advice appreciated. I've heard of 'front end , back end', DMZ, or just plain 'Port forwarding'. Am confused. Thanks in advance. Greg
  •  
jshaw541

Messages: 471
Karma: 0
Send a private message to this user
gregwhite886 wrote on Sun, 27 May 2007 12:07

Please excuse my ignorance. I run Kerio as an internal mailserver on my company network relaying to an exteral ISP. I need to allow my roaming users access from the Internet to Kerio webmail but ensure tight security. What is the best way to go about this? Any advice appreciated. I've heard of 'front end , back end', DMZ, or just plain 'Port forwarding'. Am confused. Thanks in advance. Greg


Allow incoming firewall access to port 443 tcp (Secure HTTP, aka HTTPS) to your KMS server. Point them to https://mail.foo.com

Ensure that they don't have external access to port 80, which is unencrypted (and thus, their messages and passwords can be sniffed)

The KMS manual on the kerio.com website covers this in detail:

http://www.kerio.com/manual/kms/en/ch06.html
http://www.kerio.com/manual/kms/en/ch25s02.html
http://www.kerio.com/manual/kmssbs/en/ch04s01.html
http://www.kerio.com/manual/kmsug/en/ch01.html

Kerio MailServer 6.7.1 w/AD
Windows Server 2003 SP 1
Dell PowerEdge 2850 (Dual Xeon 3.2ghz and 2 GB RAM)
~1300 users
~1000+ concurrent IMAPS connections
iPhone users
Outlook 2007 KOFF users
Apple iCal 10.5/10.6 users
  •  
gregwhite886

Messages: 6
Karma: 0
Send a private message to this user
Thanks very much for your advice. Appreciated.
Previous Topic: POP3 --> Kerio 6,4 Migration
Next Topic: [solved] Folder has change its type
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sun Nov 19 19:08:52 CET 2017

Total time taken to generate the page: 0.00469 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.