tailieunhanh - Wireless Networks dor Dummies phần 5

Bạn có thể thiết lập một trang đăng nhập cho Outlook Web Access mà các cửa hàng tên của người dùng và mật khẩu trong cookie thay vì trong trình duyệt. Khi người dùng đóng trình duyệt của họ, cookie sẽ bị xóa. Cookie cũng sẽ bị xóa tự động sau một thời gian không hoạt động. | Chapter 8 Using Wireless on the Road to Connect to the Office 143 You can set up a logon page for Outlook Web Access that stores the user s name and password in a cookie instead of in the browser. When a user closes their browser the cookie is cleared. The cookie will also be cleared automatically after a period of inactivity. This page will require the user to enter their credentials to access his e-mail. We strongly recommend that you consider using a third party two-factor authentication product such as Securid instead because this provides far stronger authentication and helps eliminates some potential issues with denial of service attacks. Web-based authentication leaves your Exchange server open to brute force password attacks from the Internet. Using easily obtained tools unauthorized persons can run automated logons against your network possibly gaining access to accounts through their use of weak passwords or company defaults. Now you need to enable forms based authentication in Exchange. You do this by setting the Enable Forms Based Authentication option in the Outlook Web Access Settings dialog box. Make sure that the time-out parameters are set to disable the session within a reasonable timeframe of inactivity such as 15 minutes the default setting . This helps prevent unauthorized access if the user forget and leave his session running while wandering off for a coffee break. The default Outlook Web Access logon page enables the user to select the security option that best fits their requirements. It uses two settings Public or Shared Computer and Private Computer. The Public or Shared Computer option is selected by default and provides a default time-out option of 15 minutes. The Private Computer option allows a default time period of 24 hours. Essentially this option is intended for users who are using personal computers in their office or home. We suggest that the options be set within your login page to 15 minutes and no option be provided for the .