BACKGROUND IMAGE: iSTOCK/GETTY IMAGES
Secure email servers on Exchange, Office 365 or both
Editor's note
No matter where your organization's email system resides, you need to secure email servers, the network those servers use and -- as much as possible -- the end users. You must take on a number of tasks on a regular basis, sometimes daily, to make sure your servers are secure.
If your organization has on-premises Exchange Server, you know that servers aren't immune to attacks that can lead to data breaches or worse. If your organization moved its email messaging service to Office 365, you aren't entirely absolved of security administration duties. Microsoft has been pushing IT shops to move to the cloud since it introduced its "cloud-first" approach for delivering future updates and features. But even with this cloud focus, many organizations still use on-premises Exchange for their email needs. With a mix of email services on-premises and in the cloud, you have to stay on top of securing two different platforms with two different architectures.
Each Exchange setup requires a different method of keeping a secure email server. Use this guide to learn about the features and tools in each deployment mode that can help you keep your organization safe from attacks.
1Security for Office 365
Office 365 features offer heightened security against attacks for enterprises that have moved their messaging systems into the cloud. Methods to control email access range from login security to client policies.
-
Article
Office 365 features offer heightened security against attacks for enterprises that have moved their
Office 365 offers a number of security features and configuration options to keep end users and email messages safe, such as threat intelligence and malware analysis capabilities -- albeit with some gaps. Read Now
-
Article
Boost Office 365 security with the AD FS extranet lockout feature
The AD FS extranet lockout feature, a security feature of the Web Application Proxy server role, can help protect organizations from denial-of-service and brute-force password attacks by locking out end user accounts after a number of unsuccessful login attempts. Read Now
-
Article
Control access with the Client Access Policy Builder
A Client Access Policy restricts access in several ways, including blocking all external connections to Office 365 services, or blocking all external access except from ActiveSync devices. Read Now
-
Article
Outlook app worth a second look
Microsoft is closing up the security holes in its Outlook app for mobile devices. The app now enforces company email policies and features built-in encryption. Read Now
-
Article
Better Exchange Online access controls available
It's time to start using conditional access for Exchange Online -- via Microsoft Intune and Office 365 Mobile Device Management -- to supplement the access control features of ActiveSync policies. Read Now
2Security for hybrid Exchange
Hybrid Exchange and Office 365 messaging setups reduce your on-premises workload, in terms of management and capital expense. At the same time, hybrid means securing two email platforms, monitoring users and attack potential on two architectures -- and can be twice the headaches if you're not properly prepared.
-
Article
Cracks in the security armor
While there's a lot of technical assistance for deploying hybrid Exchange and Office 365, there's less direction for how to secure it. Pay attention to these six areas, including cross-platform tools and incident response changes. Read Now
-
Article
Neglected servers introduce vulnerabilities
You don't get out of server management when you move to Office 365 in a hybrid deployment -- you may even add servers. That means patches and monitoring deserve rapt attention. Read Now
-
Article
Push users out of encryption
With many end users working across email platforms, and uninformed about encryption policies, the best way to keep their messages safe is to keep them out of the encryption process. Read Now
-
Article
IT seeks security-minded hosting provider
Don't assume that hosted Exchange providers have the same security priorities and safeguards in place as your team for its on-premises Exchange deployment. The right Exchange hosting company is a partner against crime. Read Now
-
Article
One click away from disaster
What can the phishing attack on the U.S. State Department tell us about our own Exchange security levels? Stop attackers from catching you in a phishing hack. Read Now