Hello,
I cannot seem to locate any information pertaining to our situation, so hoping posting here will help. In our MaaS environment we have the CE deployed; but have disabled the use of native mail and have forced users to the Outlook App by disabling Active Sync for all mailboxes. This was phase 1 of the project. Phase 2 was to enable Auto Quarantine to control user enrollment. We tried to do this last week and it did not work. Devices were not quarantined in Exchange, nor were they blocked from enrolling in MaaS. Since the Outlook App uses OAuth and TLS 1.2, and not Active Sync, is this why Auto Quarantine does not work? Is there any way to get it to work without Active Sync enabled on mailboxes?
Thanks
Dave

------------------------------
Dave Stock
------------------------------

Hi Dave,


I am not sure what you're trying to achieve but I will tell you what we recommend for our customers.

Usually, we First enable the Exchange module in the cloud extender it will give you all the device details which are using your corporate email.

Then we onboard all the users in MaaS360 and Make them enroll their devices. Then we will configure MaaS360 Mail (Active sync). 

Once all the user's enrollment is completed we will enable the auto quarantine. The auto Quarantine will block all the active sync mailboxes Except the MaaS360 Mailbox.

The use case of this recommendation is: Restrict screenshot inside the MaaS container, restrict copy-paste from outside of the container,  AES 256 encryption, and much more restriction using the workplace policy. Users cannot able to configure their mail anywhere rather than in MaaS360 Mail.


Thanks
Mohan



------------------------------
mohanraj
------------------------------

Hi Mohan,
Thank you for the response; but your response did not answer my questions. I thought my original questions were clear but maybe not. If you or someone else can answer I would appreciate it.
1. Will the Cloud Extender and Auto Quarantine in MaaS360 work without Active Sync enabled? So far I have tried three times and it does not seem to work.
Thanks

------------------------------
Dave Stock
------------------------------

Original Message:
Sent: Tue May 25, 2021 05:39 AM
From: mohanraj muthusamy
Subject: Cloud Extender/Active Sync & the Outlook App

Hi Dave,


I am not sure what you're trying to achieve but I will tell you what we recommend for our customers.

Usually, we First enable the Exchange module in the cloud extender it will give you all the device details which are using your corporate email.

Then we onboard all the users in MaaS360 and Make them enroll their devices. Then we will configure MaaS360 Mail (Active sync). 

Once all the user's enrollment is completed we will enable the auto quarantine. The auto Quarantine will block all the active sync mailboxes Except the MaaS360 Mailbox.

The use case of this recommendation is: Restrict screenshot inside the MaaS container, restrict copy-paste from outside of the container,  AES 256 encryption, and much more restriction using the workplace policy. Users cannot able to configure their mail anywhere rather than in MaaS360 Mail.


Thanks
Mohan



------------------------------
mohanraj
------------------------------

Original Message:
Sent: 5/25/2021 11:50:00 AM
From: Dave Stock
Subject: RE: Cloud Extender/Active Sync & the Outlook App

Hi Mohan,
Thank you for the response; but your response did not answer my questions. I thought my original questions were clear but maybe not. If you or someone else can answer I would appreciate it.
1. Will the Cloud Extender and Auto Quarantine in MaaS360 work without Active Sync enabled? So far I have tried three times and it does not seem to work.
Thanks

------------------------------
Dave Stock
------------------------------

Ok thanks. Yep what I thought. Are there any plans on revising Auto Quarantine? Active Sync is going the way of the Dinosaurs as it is horribly insecure.

------------------------------
Dave Stock
------------------------------

Original Message:
Sent: Tue May 25, 2021 05:39 AM
From: mohanraj muthusamy
Subject: Cloud Extender/Active Sync & the Outlook App

Hi Dave,


I am not sure what you're trying to achieve but I will tell you what we recommend for our customers.

Usually, we First enable the Exchange module in the cloud extender it will give you all the device details which are using your corporate email.

Then we onboard all the users in MaaS360 and Make them enroll their devices. Then we will configure MaaS360 Mail (Active sync). 

Once all the user's enrollment is completed we will enable the auto quarantine. The auto Quarantine will block all the active sync mailboxes Except the MaaS360 Mailbox.

The use case of this recommendation is: Restrict screenshot inside the MaaS container, restrict copy-paste from outside of the container,  AES 256 encryption, and much more restriction using the workplace policy. Users cannot able to configure their mail anywhere rather than in MaaS360 Mail.


Thanks
Mohan



------------------------------
mohanraj
------------------------------

Original Message:
Sent: 5/25/2021 2:49:00 PM
From: Dave Stock
Subject: RE: Cloud Extender/Active Sync & the Outlook App

Ok thanks. Yep what I thought. Are there any plans on revising Auto Quarantine? Active Sync is going the way of the Dinosaurs as it is horribly insecure.

------------------------------
Dave Stock
------------------------------