Blocking the Outlook Mobile App for iOS and Android: Difference between revisions

No edit summary
Line 1: Line 1:
{{Article Infobox|{{admin}}|{{ZCS 8.6}}||{{ZCS 8.5}}|||}}
{{Unsupported}}{{Article Infobox|{{admin}}|{{ZCS 8.6}}||{{ZCS 8.5}}|||}}


= Blocking the Outlook Mobile App for iOS and Android =
= Blocking the Outlook Mobile App for iOS and Android =
Line 47: Line 47:


     zmcontrol restart
     zmcontrol restart
==Testing the changes==
Once the Zimbra server is up, we can go to our devices and open the Mail.app in iOS and send to us a email, we will see it.
If we open the Outlook Mobile App, we will not sync Mail, Contacts, or Calendar, anymore.


==Log trace==
==Log trace==

Revision as of 15:38, 11 February 2015

Admin Article

Article Information

This article applies to the following ZCS versions.

ZCS 8.6 Article ZCS 8.6 ZCS 8.5 Article ZCS 8.5


Blocking the Outlook Mobile App for iOS and Android

In February 2015, Microsoft release the Outlook Mobile app for iOS and Android. Previously Acompli, the Outlook Mobile App came with a lot of security issues and some companies expressed concerned about it:

Blocking the Outlook Mobile App with the Proxy service

If we are running Zimbra with the Proxy service, we can block the Outlook Mobile App editing the next commands (these changes will survive a restart of the services, but not an upgrade)

As the zimbra user, you'll edit the following files.

su - zimbra

Edit the HTTP Nginx template:

   vi /opt/zimbra/conf/nginx/templates/nginx.conf.web.http.default.template

And add the next content when the server starts:

   # HTTP Proxy Default Configuration
   #
   server
   {
       if ($http_user_agent ~ (Outlook-iOS-Android) ) {
       return 403;
   }

Edit the HTTPS Nginx template:

   vi /opt/zimbra/conf/nginx/templates/nginx.conf.web.http.default.template

And add the next content when the server starts:

   # HTTPS Proxy Default Configuration
   #
   server
   {
       if ($http_user_agent ~ (Outlook-iOS-Android) ) {
       return 403;
   }

Restart the Zimbra services to apply the changes [still as the zimbra user]:

   zmcontrol restart

Log trace

In the Logs we can see the attempts of access since the Outlook Mobile App and the 403 error like this:

   54.187.102.116:55301 - zimbra.io\x5Cadmin [11/Feb/2015:10:16:42 -0500]  "POST /Microsoft-Server-ActiveSync?User=zimbra.io%5Cadmin&DeviceId=215CD17123FC80C2&DeviceType=Outlook&Cmd=Sync HTTP/1.1" 403 310 "-" "Outlook-iOS-Android/1.0" "-"

AS we can see, the IP 54.187.102.116, is from the Outlook servers, and not from our device ISP provider.

And see the Log from the Mail.app accesing without problem:

   23.23.23.23:51889 - zimbra.io\x5Cadmin [11/Feb/2015:10:17:29 -0500]  "POST /Microsoft-Server-ActiveSync?User=admin&DeviceId=M92PFITKBD0S14XXXXXXXXXXXX&DeviceType=iPad&Cmd=Sync HTTP/1.1" 200 357 "-" "Apple-iPad2C5/1202.466" "127.0.1.1:8443"

Identified Support/Known Issues

Verified Against: Zimbra Collaboration Suite 8.6, 8.5 Date Created: 02/11/2015
Article ID: https://wiki.zimbra.com/index.php?title=Blocking_the_Outlook_Mobile_App_for_iOS_and_Android Date Modified: 2015-02-11



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Jump to: navigation, search