Microsoft Outlook Web access: blessing or ban to security?

Abstract

In deciding how to handle messaging access in a Microsoft Exchange environment, IT managers have an important and interesting tradeoff to make. On the one hand, employees have legitimate communication and e-mail requirements. On the other hand, providing access to messaging from outside the corporate intranet raises considerable security concerns. Obviously, no rule applies universally, and every company or organization must draw its own conclusions and make its own recommendations. This article's purpose is to provide the information you need to make the appropriate tradeoff. Outlook Web Access is not a public messaging service. Instead, it is a Microsoft software product that lets Exchange server users access their accounts with a standard Web browser.