Outlook Anywhere

Authenticating Outlook Anywhere

2

As an organization with security close to our heart I was pleased to learn last week that Microsoft has introduced smart card authentication with Outlook Anywhere, as reported by @PaulRobichaux. As more and more companies start to embrace remote working – to get the most out of their employees wherever they are and let them work when it suits them best – it seems slightly surprising that Microsoft has only just enabled this.

Previously, to access Microsoft Exchange accounts outside the organization’s firewall, when at home or traveling, you needed a virtual private network (VPN) connection. With Outlook Anywhere, an alternative to VPN connections, you connect to Exchange through the Internet using Remote Procedure Call (RPC) over HTTP. While smart card-based authentication has been supported by Windows for a number of years, it was missing as a second authentication factor with Outlook Anywhere. Luckily, this is no longer the case and we can now ensure that all remote workers have secure (multi authentication) access to their organization’s networks. This is all the more the more pressing following recent hacking attacks, as this infographic shows.

You can learn how to configure smart card authentication for Outlook Anywhere here.

My question for readers is, will your organization be implementing smart card authentication on Outlook Anywhere now that Windows supports it? And if not, why not?

Contact:


Leave a comment


  1. Comments

  2. David Law said:

    For all the reasons we all know, smart card authentication has not been popular. Instead, OTP tokens have become the most popular authentication method for two-factor authentication because of its simplicity and low cost to implement and deploy.

    Microsoft does not support OTP with Outlook Anywhere. You will need a 3rd-party authentication server that supports Outlook Anywhere with two-factor authentication. Currently, there is only one such product, Deepnet DualShield:

    http://www.deepnetsecurity.com/solutions/outlook/anywhere/

  3. clawless said:

    I have OWA for Exchange 2003 working with smart card authentication…?

Related posts: