Exchange 2010 and securing mail to certain accounts.

We have developers that are on a domain and exchange server in another country. Currently we have their addresses within our domain here and they have accounts on a (separate)domain and Exchange server there. These developers have no internet access for security purposes. Current they have written a program that when we send to a certain single address, the sender puts the username$ in the subject line and the program on the other side, routes mail to the user internally there.

What I'm trying to find out is there a better way to make Exchange do this securely within the local domain or is it available within Exchange?
LVL 1
HaroldNetwork EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Murali ReddyExchange ExpertCommented:
Do they have individual mailboxes in the other forest?

If so, let them create a distribution group there including all the mailboxes they have. The DL should be allowed to email from external world.

Then create a contact with the email address as that of group address they created. Then exchange emails.
0
HaroldNetwork EngineerAuthor Commented:
Murali

Yes, mailboxes on both

" The DL should be allowed to email from external world."  sorry DL?  So what would prevent them from sending to the world in this configuration? Like sending code out.

"Then create a contact with the email address as that of group address they created." this address would be assigned to the Group, correct?
0
kevinhsiehCommented:
Is the point to prevent the other developers from sending email? That can be done on their exchange server very easily.

http://exchangeserverpro.com/restrict-outbound-email-transport-rule/
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

HaroldNetwork EngineerAuthor Commented:
kevinhsieh: thanks, that looks more like what we need, but curious, what if we have webmail enabled. Say someone created a message, attached source code to the message and saved it to drafts, then logged in to webmail outside and downloaded. Will this protect this as well?
0
kevinhsiehCommented:
Only if you disable webmail. Also, if you email them documents, and they access that from IMAP, POP3, ActiveSync, or RPC over HTTPS you still have possibly lost control of the email/documents. You also need to be sure that they can't copy anything to USB stick, external drive, iPod, CD, DVD, their own laptop/computer attached to the network, or access the physical hard drive in a computer. Don't forget about printouts and taking photos of the screen. There are lots of ways that data can leak. You should be looking at a real DLP (data loss prevention) solution.

That said, if you can't trust your developers, how can you trust their code?
0
HaroldNetwork EngineerAuthor Commented:
kevinhsieh: thanks, I had a feeling all that would have to be disabled, but can't obviously, for cutting off everyone else. I was just given the task and trying best to give them what they want, for security. I do appreciate all you given me, as it has helped greatly.

Best regards
0
HaroldNetwork EngineerAuthor Commented:
thanks again!
0
kevinhsiehCommented:
You can disable access via various protocols on a per mailbox/user basis. You can disable OWA, ActiveSync, POP3, and IMAP. I am not sure how you prevent MAPI access from outside.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.