Welcome to ISAserver.org

Simplifying User authentication using User certificate from internal AD CA ?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Simplifying User authentication using User certificate from internal AD CA ?

Page: [1]

Message

<< Older Topic Newer Topic >>

Simplifying User authentication using User certificate ... - 11.Mar.2011 10:32:08 AM

albertwt

Posts: 24
Joined: 3.Mar.2011
From: Australia
Status: offline

Hi All,

Is it possible using TMG 2010 Std. to automate the user authentication process of my Outlook Anywhere on Exchange Server 2007 ?

so rather than the user typed the DOMAIN\username everytime to the Outlook client prompt, the use can just generate the User type certificate from the Internal AD CA and then import the certificate to the local PC and selecting from the dropdown their own name ?

I wonder if this is possible with TMG 2010 and Outlook Anywhere 2007 on Exchange Server 2007 SP1.

Thanks

Post #: 1

Featured Links*

RE: Simplifying User authentication using User certific... - 11.Mar.2011 10:35:43 PM

moit

Posts: 27
Joined: 5.Mar.2008
Status: offline

Try with this setting in Outlook 2007:
Tools--Account Settings--Change--More Settings--Connection--Exchange Proxy Settings--Select both:
On Fast .....
On Slow .....

[image][/image]

(in reply to albertwt)

Post #: 2

RE: Simplifying User authentication using User certific... - 11.Mar.2011 11:56:13 PM

albertwt

Posts: 24
Joined: 3.Mar.2011
From: Australia
Status: offline

ok, so with that settings, the authentication can be use with certificate ?

(in reply to moit)

Post #: 3

RE: Simplifying User authentication using User certific... - 12.Mar.2011 10:00:24 AM

moit

Posts: 27
Joined: 5.Mar.2008
Status: offline

No. You might not get a logon prompt with these settings when using Outlook Anywhere as I dont get prompted with these settings. Please try it with one Outlook client without doing anything on the server side or certificates etc.

I wanted to post an image of these settings, not sure how on this forum.

(in reply to albertwt)

Post #: 4

RE: Simplifying User authentication using User certific... - 12.Mar.2011 10:04:19 AM

albertwt

Posts: 24
Joined: 3.Mar.2011
From: Australia
Status: offline

thakns moit, so in this way I don't need to generate the user certificate for securing OA ?

I wonder if TMG 2010 can actually do this or this is not possible with this combination ?

thanks for your reply though, perhaps you can upload the picture into imageshack.us instead ?

(in reply to moit)

Post #: 5

RE: Simplifying User authentication using User certific... - 12.Mar.2011 10:29:53 AM

paulo.oliveira

Posts: 3470
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

IIRC, outlook client does no support client certificate authentication.

You can use KCD instead of certificate: http://blog.msfirewall.org.uk/2008/07/publishing-exchange-2007-services-with.html

Regards,
Paulo Oliveira.

_____________________________

Microsoft MVP - Forefront
MCP - ISA Firewall 2004
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to albertwt)

Post #: 6

RE: Simplifying User authentication using User certific... - 12.Mar.2011 10:40:27 AM