Security Basics mailing list archives

Re: Blocking Outlook External POP/SMTP


From: Stephen Mullins <steve.mullins.work () gmail com>
Date: Tue, 16 Mar 2010 11:31:29 -0400

Reasons to prohibit use of web mail: waste of company time, waste of
company resources, increased exposure to email based attacks, webmail
is an avenue for data exfiltration.

On Mon, Mar 15, 2010 at 6:07 PM, Gareth Fletcher
<gareth.fletcher () gmail com> wrote:
If you have McAfee ePO installed you can creat an access protection rule to
prevent certain processes eg Outlook.exe from connecting to explicit remote
ports. Only problem is you can't exclude remote IPs (like a legitimate imap
server) but if that's ok...

Perhaps there is something similar from your AV vendor (if it's different,
like symantec endpoint protection?). Firewall rule will work but not if user
is offsite.

Hope this helps
GF

Sent from iPhone

On 12/03/2010, at 10:40 AM, "Hart, Lee Anne"
<LeeAnne.Hart () montgomerycollege edu> wrote:

Hello,

I'm looking for information on preventing/prohibiting users from utilizing
Outlook (at work) to retrieve their personal email from Gmail, AOL, Yahoo,
Comcast, Verizon, etc.

Looking for the following:

* Reasons why users should not be allowed to use Outlook on their work
computers to retrieve their personal email.

* Tools/techniques to block this type of traffic. It seems the most common
ports are 110, 465, 587, 993, and 995. Are there others?

Any reference are much appreciated.

Thank you!
Lee Anne




------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company and how
your customers can tell if a site is secure. You will find out how to test,
purchase, install and use a thawte Digital Certificate on your Apache web
server. Throughout, best practices for set-up are highlighted to help you
ensure efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: