Web-based mail options

[adrigole]

I work for a small consultancy with an increasing need for our consultants to receive and send mail from their company accounts while on site. I am aware of 4 main options 1) Open server to SSL and allow consultants to connect this way , 2) inotes, 3) host mail files externally, 4) use pop3 accounts

Could someone tell me the pros and cons of these approaches and what would be the best for us. Talking about up to 6 consultants needing access from their laptops. Cost and time to set up is a major constraint on this issue, I am leaning towards inotes but have very little knowledge of the other alternatives.

 

[MarkhP]

Is there a reason you aren't entertaining using the real client in mobile configuration? If they have laptops they can have a local copy of their mail files (handy if they need to refer to previous mails without going online). Because it is held in .nsf form it has good security. The users need only learn/know one interface to use email. You only need to set your firewall to allow traffic on port 1352 to your internal Domino server for client replication. You also dont get any compatibility issues that you may with mixed clients.

 

[adrigole]

is there not major security issues with opening up a port on firewall, what measures would be needed to minimize to only allow our consultant access through the port. SSL is one option I am aware of but it seems expensive on first glance

 

[MarkhP]

As far as I know, there are no outstanding vulnerabilities on opening port 1352 on Domino. There was a DoS issue which was fixed I believe. We have run with 1352 open for 5 years with no issue. As it is only used for Notes traffic I think it is pretty safe. Ensure that your databases are not accessible by 'anonymous' in the ACLs. Also look at restricting the number of connections to the server if possible.

A related discussion found here...

http://www.derkeiler.com/Mailing-Lists/securityfocus/security-basics/2002-08/0154.html

PS - You can use Domino as its own CA.