Re: Blocking Outlook External POP/SMTP

["gig" <gigabit () satx rr com>]

Lee Anne,

I agree with your position of restricting client side apps from getting 
email directly.  Outlook and Outlook Express are notorious for security 
vulnerabilities and the need for constant patching.  It might have been 
fixed, but both apps had a major problem as the preview pane allowed 
auto-execution of scripts and executables.

If your company is willing, they can still allow access to outside email via 
webmail mail portals.  You will still have risks of viruses, malware and 
data leakage but my opinion is that the risk is reduced as it makes it a bit 
more inconvenient for people to do dumb things.

As far as implementation, assuming you have a corporate email server, you 
can surely craft ACLs based on ports to only allow access externally to that 
corp email server.

hope that helps.


----- Original Message ----- 
From: "Hart, Lee Anne" <LeeAnne.Hart () montgomerycollege edu>
To: <security-basics () securityfocus com>; <firewalls () securityfocus com>
Sent: Thursday, March 11, 2010 4:40 PM
Subject: Blocking Outlook External POP/SMTP


> Hello,
>
> I'm looking for information on preventing/prohibiting users from utilizing
> Outlook (at work) to retrieve their personal email from Gmail, AOL, Yahoo,
> Comcast, Verizon, etc.
>
> Looking for the following:
>
> * Reasons why users should not be allowed to use Outlook on their work
> computers to retrieve their personal email.
>
> * Tools/techniques to block this type of traffic. It seems the most common
> ports are 110, 465, 587, 993, and 995. Are there others?
>
> Any reference are much appreciated.
>
> Thank you!
> Lee Anne


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------