Exchange 2016: OPNsense, HAProxy and Let's Encrypt

OPNSense is a fork of the well-known open source firewall PFSense, I personally like OPNSense better, the GUI is tidier, there is a REST api and the most important plug-ins are also available. As there is a plugin for HAProxy and also for Let's Encrypt for OPNSense, I have started testing this combination in conjunction with Exchange 2016. OPNSense ... Read more

Chrome and Windows Server 2016: ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY

The Chrome browser reports the following error for websites running on an IIS server on Windows Server 2016: ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY In this case, Chrome does not allow the error to be ignored. The problem also occurs with Exchange 2016 servers installed on Windows Server 2016. The problem lies in old cipher suites and ... Read more

Exchange Server: New updates (March 2017)

New updates have been released for all Exchange Server versions. Click here to download directly: Exchange Server 2016 CU5 Exchange Server 2013 CU16 Exchange Server 2010 SP3 UR17 Exchange Server 2007 SP3 UR23 Click here for details of the changes: Exchange Server 2016 CU5 Exchange Server 2013 CU16 Exchange Server 2010 SP3 UR17 Exchange ... Read more

Receive e-mail with new Exchange updates (Microsoft Security Guide)

In this blog post, Thomas Shinder from Microsoft presented the new "Microsoft Security Guide". The article is quite interesting and well worth reading. I was particularly taken with the last section. It says: The Security Update Guide development API can be used to create a report in CVRF format. To use this API, click the ... Read more

Important update for Exchange 2013/2016

Today an important update was released for the following Exchange Server versions: Microsoft Exchange Server 2013 Service Pack 1 Microsoft Exchange Server 2013 Cumulative Update 14 Microsoft Exchange Server 2016 Cumulative Update 3 It is interesting to note that the Exchange versions are no longer completely up-to-date. There is already CU4 for Exchange 2016, as well as CU15 for ... Read more

Sophos XG: Exchange 2016 and SFOS 16.05 Webserver Protection (Part 2)

In part 1, the basic configuration of Sophos XG in conjunction with Exchange 2016 has already been carried out, but some configuration work is still missing so that Outlook Anywhere, MAPIoverHTTP and the REST Api also work. As already mentioned in part 1, the Sophos templates for business applications are somewhat outdated, so manual improvements are required here. It is somewhat irritating that ... Read more

Sophos XG: Exchange 2016 and SFOS 16.05 Webserver Protection (Part 1)

Sophos has been offering the successor to the UTM, called Sophos XG, for some time now. Sophos's advertising slogan: The next thing in next-gen: ultimate firewall performance, security and control So far, I've steered clear of Sophos XG, as a lot of things didn't really work smoothly in my last test. My last test is ... Read more

Sophos UTM 9.4 WAF and Exchange 2016 (without RPCoverHTTP)

At the end of last year, I had already written an article on the topic of RPCoverHTTP, better known as Outlook Anywhere: Exchange 2016: Is RPCoverHTTP still needed? I therefore switched off Outlook Anywhere in my environment in December 2016. I have not encountered any problems so far. Outlook 2016 works perfectly with MAPIoverHTTP. So now that over two ... Read more