IBM Security MaaS360

 View Only
  • 1.  Cloud Extender/Active Sync & the Outlook App

    Posted Mon May 24, 2021 03:47 PM
    Hello,
    I cannot seem to locate any information pertaining to our situation, so hoping posting here will help. In our MaaS environment we have the CE deployed; but have disabled the use of native mail and have forced users to the Outlook App by disabling Active Sync for all mailboxes. This was phase 1 of the project. Phase 2 was to enable Auto Quarantine to control user enrollment. We tried to do this last week and it did not work. Devices were not quarantined in Exchange, nor were they blocked from enrolling in MaaS. Since the Outlook App uses OAuth and TLS 1.2, and not Active Sync, is this why Auto Quarantine does not work? Is there any way to get it to work without Active Sync enabled on mailboxes?
    Thanks
    Dave

    ------------------------------
    Dave Stock
    ------------------------------


  • 2.  RE: Cloud Extender/Active Sync & the Outlook App

    Posted Tue May 25, 2021 05:39 AM
    Hi Dave,


    I am not sure what you're trying to achieve but I will tell you what we recommend for our customers.

    Usually, we First enable the Exchange module in the cloud extender it will give you all the device details which are using your corporate email.

    Then we onboard all the users in MaaS360 and Make them enroll their devices. Then we will configure MaaS360 Mail (Active sync). 

    Once all the user's enrollment is completed we will enable the auto quarantine. The auto Quarantine will block all the active sync mailboxes Except the MaaS360 Mailbox.

    The use case of this recommendation is: Restrict screenshot inside the MaaS container, restrict copy-paste from outside of the container,  AES 256 encryption, and much more restriction using the workplace policy. Users cannot able to configure their mail anywhere rather than in MaaS360 Mail.


    Thanks
    Mohan



    ------------------------------
    mohanraj
    ------------------------------



  • 3.  RE: Cloud Extender/Active Sync & the Outlook App

    Posted Tue May 25, 2021 11:50 AM
    Hi Mohan,
    Thank you for the response; but your response did not answer my questions. I thought my original questions were clear but maybe not. If you or someone else can answer I would appreciate it.
    1. Will the Cloud Extender and Auto Quarantine in MaaS360 work without Active Sync enabled? So far I have tried three times and it does not seem to work.
    Thanks


    ------------------------------
    Dave Stock
    ------------------------------



  • 4.  RE: Cloud Extender/Active Sync & the Outlook App

    Posted Tue May 25, 2021 11:55 AM
    Hi Dave,

    No, it will not work as far as I know because auto quarantine is for only active sync protocol.


    Thanks & Regards 
    M.Mohanraj







  • 5.  RE: Cloud Extender/Active Sync & the Outlook App

    Posted Tue May 25, 2021 02:49 PM
    Ok thanks. Yep what I thought. Are there any plans on revising Auto Quarantine? Active Sync is going the way of the Dinosaurs as it is horribly insecure.

    ------------------------------
    Dave Stock
    ------------------------------



  • 6.  RE: Cloud Extender/Active Sync & the Outlook App

    Posted Tue May 25, 2021 02:54 PM
    Edited by mohanraj muthusamy Mon May 31, 2021 12:54 AM
    Hi,
    If you enabled, it via the MaaS360 portal then you can disable it otherwise you have to disable it from your exchange server. But I would recommend you to use MaaS360 Secure Mail. 

    Thanks & Regards 
    M.Mohanraj