Hello. We would like to roll out exchange activesync for a couple users on their phones, however I am gathering information on the security of such a setup.
How can we implement two layers of security?
For OWA, for example, our users log in to a cisco 5510 WebVPN, and from there into OWA..
With activesync, how could we make it work? I do not want to open any ports to exchange directly (only one server with all roles currently)
What is the recommended solution for the above? SSL VPN on the phone, then activesync?