The vast majority of company
executives and mobile business users require access
to their email anytime and from anywhere. Whether that
is at home on their laptops, visiting a business partner,
a client or at an Internet café or public library
they need access to their corporate email that is simple
to use and secure. Now, those users can access their
email from any Internet connected computer using a standard
Web browser. Using a simple Defender GO-1 token for
strong authentication and standard SSL (HTTPS) for encrypted
sessions to the proxy server, users can ensure that
their email remains private and nobody else can spoof
their passwords for access.
Access
via Proxy Server
Users never directly access
the email server so that the true location of the
content is not disclosed. Using SSL (HTTPS) into the
proxy server and not the email server reduces the
burden on resources. This enables a standard HTTP
access from the proxy to the email server. This helps
Intrusion Detection Systems (IDS) to examine packets
coming from the Proxy Service, which they cannot otherwise
do, on an SSL connection.
Session
Control
To deal with the stateless
nature of HTTP browsing, a session management mechanism
enables session life and inactivity timeouts, a session
being from the point of authentication to content
to the point of termination, life expiration, inactivity
expiration, disconnection or logout.
Data
Security
No sensitive data is stored
in cookies or sent to browsers; only the encrypted
session ID only is stored. Personalisation information
is never copied to the user’s browsers; the proxy
server holds it where it can be used by corporate
applications.
Current
Limitations
Browser based access requires
a web enabled email server on the corporate network.
Limited to HTTP and HTTPS protocols.
SSL encryption is used to secure
communication between the user’s Web browser and
Proxy Server ensuring that the user’s email content
remains private across the Internet. Because the NOCACHE
flag is sent to the web browser then no pages will normally
be stored on the local workstation. User authentication
is enhanced using certificates or Defender GO-1 tokens
that provide dynamic, one-time passwords that are unique
to each session.
For further information
on secure web-based email then please contact our office.
