Difference between revisions of "Blocking the Outlook Mobile App for iOS and Android"

(Identified Support/Known Issues)
m (Blocking the Outlook Mobile App with the Proxy service)
Line 12: Line 12:
  
 
If we are running Zimbra with the Proxy service, we can block the Outlook Mobile App editing the next commands '''(these changes will survive a restart of the services, but not an upgrade)'''
 
If we are running Zimbra with the Proxy service, we can block the Outlook Mobile App editing the next commands '''(these changes will survive a restart of the services, but not an upgrade)'''
 +
 +
As the zimbra user, you'll edit the following files.
 +
 +
su - zimbra
  
 
Edit the HTTP Nginx template:
 
Edit the HTTP Nginx template:
 +
 
     vi /opt/zimbra/conf/nginx/templates/nginx.conf.web.http.default.template
 
     vi /opt/zimbra/conf/nginx/templates/nginx.conf.web.http.default.template
  
 
And add the next content when the server starts:
 
And add the next content when the server starts:
 +
 
     # HTTP Proxy Default Configuration
 
     # HTTP Proxy Default Configuration
 
     #
 
     #
Line 25: Line 31:
 
     }
 
     }
 
Edit the HTTPS Nginx template:
 
Edit the HTTPS Nginx template:
 +
 
     vi /opt/zimbra/conf/nginx/templates/nginx.conf.web.http.default.template
 
     vi /opt/zimbra/conf/nginx/templates/nginx.conf.web.http.default.template
  
 
And add the next content when the server starts:
 
And add the next content when the server starts:
 +
 
     # HTTPS Proxy Default Configuration
 
     # HTTPS Proxy Default Configuration
 
     #
 
     #
Line 36: Line 44:
 
     }
 
     }
  
Like user zimbra, restart Zimbra services to apply the changes:
+
Restart the Zimbra services to apply the changes [still as the zimbra user]:
 +
 
 
     zmcontrol restart
 
     zmcontrol restart
 
  
 
==Testing the changes==
 
==Testing the changes==

Revision as of 15:34, 11 February 2015

Admin Article

Article Information

This article applies to the following ZCS versions.

ZCS 8.6 Article ZCS 8.6ZCS 8.5 Article ZCS 8.5


Blocking the Outlook Mobile App for iOS and Android

In February 2015, Microsoft release the Outlook Mobile app for iOS and Android. Previously Acompli, the Outlook Mobile App came with a lot of security issues and some companies expressed concerned about it:

Blocking the Outlook Mobile App with the Proxy service

If we are running Zimbra with the Proxy service, we can block the Outlook Mobile App editing the next commands (these changes will survive a restart of the services, but not an upgrade)

As the zimbra user, you'll edit the following files.

su - zimbra

Edit the HTTP Nginx template:

   vi /opt/zimbra/conf/nginx/templates/nginx.conf.web.http.default.template

And add the next content when the server starts:

   # HTTP Proxy Default Configuration
   #
   server
   {
       if ($http_user_agent ~ (Outlook-iOS-Android) ) {
       return 403;
   }

Edit the HTTPS Nginx template:

   vi /opt/zimbra/conf/nginx/templates/nginx.conf.web.http.default.template

And add the next content when the server starts:

   # HTTPS Proxy Default Configuration
   #
   server
   {
       if ($http_user_agent ~ (Outlook-iOS-Android) ) {
       return 403;
   }

Restart the Zimbra services to apply the changes [still as the zimbra user]:

   zmcontrol restart

Testing the changes

Once the Zimbra server is up, we can go to our devices and open the Mail.app in iOS and send to us a email, we will see it. If we open the Outlook Mobile App, we will not sync Mail, Contacts, or Calendar, anymore.

Log trace

In the Logs we can see the attempts of access since the Outlook Mobile App and the 403 error like this:

   54.187.102.116:55301 - zimbra.io\x5Cadmin [11/Feb/2015:10:16:42 -0500]  "POST /Microsoft-Server-ActiveSync?User=zimbra.io%5Cadmin&DeviceId=215CD17123FC80C2&DeviceType=Outlook&Cmd=Sync HTTP/1.1" 403 310 "-" "Outlook-iOS-Android/1.0" "-"

AS we can see, the IP 54.187.102.116, is from the Outlook servers, and not from our device ISP provider.

And see the Log from the Mail.app accesing without problem:

   23.23.23.23:51889 - zimbra.io\x5Cadmin [11/Feb/2015:10:17:29 -0500]  "POST /Microsoft-Server-ActiveSync?User=admin&DeviceId=M92PFITKBD0S14XXXXXXXXXXXX&DeviceType=iPad&Cmd=Sync HTTP/1.1" 200 357 "-" "Apple-iPad2C5/1202.466" "127.0.1.1:8443"

Identified Support/Known Issues

Verified Against: Zimbra Collaboration Suite 8.6, 8.5 Date Created: 02/11/2015
Article ID: https://wiki.zimbra.com/index.php?title=Blocking_the_Outlook_Mobile_App_for_iOS_and_Android Date Modified: 2015-02-11



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Jump to: navigation, search