Solved

Is there anyway to block Outlook Web Access internally?

Posted on 2008-10-29
10
772 Views
Last Modified: 2012-05-05
We have user's that are using outlook web access internally and we do not want them to. We have a link to OWA via our external website. We want user's to be able to use this link when they are not in the building. We currently use iprism for our internet filtering but haven't found a way to block this.
0
Comment
Question by:abahr
  • 5
  • 3
  • 2
10 Comments
 
LVL 2

Expert Comment

by:calepantke
ID: 22833184
You can use IE's content advisor to block the webmail site on his PC. 
http://www.wikihow.com/Block-a-Website-in-Internet-Explorer-7
0
 

Author Comment

by:abahr
ID: 22833223
Great idea. Is there any way to do this easily for all of our PC's without touching each one? We also are not on IE7, but we can always upgrade to it.
0
 
LVL 2

Accepted Solution

by:
calepantke earned 500 total points
ID: 22833284
Yes you can. Implement the content advisor through group policy if you are running active directory. 
You can find it under User Config/Windows Settings/Internet Explorer Maintenance/Security/Security Zones and Content Ratings and modify the Content Ratings there. 
A little more information can be found here.
http://www.experts-exchange.com/Security/Misc/Q_21226658.html
0
 
LVL 2

Expert Comment

by:calepantke
ID: 22833441
I decided to test this... and if you have a webmail site like mail.mydomain.com then if someone tries to go to www.mydomain.com they will get blocked. 
If you don't want this, another way to do it is to add a fake route for the webmail IP on every machine. You can do this through GPO.
http://www.experts-exchange.com/Security/Software_Firewalls/Q_22777039.html
Or you could try out using Windows Firewall to block the IP. 
0
 
LVL 2

Expert Comment

by:calepantke
ID: 22833571
"I decided to test this... and if you have a webmail site like mail.mydomain.com then if someone tries to go to www.mydomain.com they will get blocked."

My mistake... I didn't check the "Users can see websites that have no ratings". This works well. Sorry for the confusion!
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 22868554
Actually, it's much easier than that.

In IIS, just block your internal IP addresses from the \Exchange virtual directory.

Right click the Exchange virtual directory and select properties > Directory Security Tab.

Click the Edit... button under IP address and domain name restrictions.

Leave the "Granted access" selected, and then Add.. whatever IP address range you like to restrict access.

Jeff
TechSoEasy


image.png
image2.png
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 22868600
You can also exclude your EXTERNAL IP address as well if they are going out and back in to access OWA.

Jeff
TechSoEasy
0
 
LVL 2

Expert Comment

by:calepantke
ID: 22869373
Which you could do the same with a bad route as well which I listed above.
It depends which method is easier for the environment you are in. Sometimes you have certain Computers, other times it's certain Users, or maybe certain IP address ranges. 
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 22869716
The "bad route" solution still requires configuration at the workstation level (either directly or through group policy).  The suggestion I made is done at the server level.  These are very different methods.

Jeff
TechSoEasy
0
 

Author Closing Comment

by:abahr
ID: 31511264
Thanks for your help!
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

This article is essential to make secure Yahoo Mail connection without facing any issue. It is providing simple steps to configure your Yahoo Mailbox to Hard drive using Microsoft Outlook.
Create high volume marketing opportunities using email signatures with these top 10 DOs and DON'Ts of email signature marketing.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now