Index_O

O

-o switch, HFNetChk, 97

object model guards, Outlook, 263

Oblt-log.log, 109–10

Office, Microsoft, 178–79, 281

offline root CAs, 231

OnArrival event sinks, 163–65

OnAuthenticationComplete( ) handler, ISAPI filter, 293

on-demand scans, 179

OnPreprocHeaders( ) handler, ISAPI filter, 293

opaque-signed messages, 264

open relays, 141–42

OpenHack competition, 205

operational security. See security, operational

opportunistic targets, 61

organization preparation, Exchange, 121–24

Outbound Security dialog box, 199–201

Outlook, 259–82

additional reading, 281

address book/object model, 263

attachments, 260–63

configuring SSL for IMAP/SMTP, 328

Outlook, continued

ISA server and, 215, 218

junk mail filters, 153–54

macro viruses, 178–79

Security Update, 259–60, 265–72

security zone changes, 263–64

settings for end users, 272–73

S/MIME, 264–65, 273–79

toolbox features, 279–80

Outlook object model, 263, 269–71

Outlook Security Settings tab, 267–69

Outlook Security Update, 265–72

additional reading, 281

overview of, 259–60

public folder for, 266–67

security package installation, 265–66

settings deployment, 271–72

template, filling out, 267–71

Trusted Code control installation, 266

Outlook Web Access

additional reading, 321–22

authentication, 285–88

destination sets, 315–17

front-end and back-end servers, 283–85

Information Store, shutting down, 318–19

publishing with ISA Server, 313–18

services, minimizing running, 319–21

Outlook Web Access, access control, 288–97

form-based authentication, 291–94

permissible authentication, 289–91

segmentation, 294–97

for servers, 289

for specific users, 294

virtual servers vs. virtual directories, 288

Outlook Web Access, firewalls, 304–13

FE/BE communications and, 309–13

opening correct ports, 306–09

overview of, 304–06

Outlook Web Access, SSL, 297–304

content caching, 303–4

load balancing, 302–3

overview of, 297–98

password changes, 299–301

redirecting non-SSL requests, 298–99

OutlookSecurity.oft file, Outlook Security Update, 266, 267

outsourcing, PKI, 225–26