Administrator's Guide - Kerio Software Archive

15.6 Advanced Optionsnot have to worry about this topic.It is recommended to enable the Enable conversion of uuencoded messages to MIME optionespecially if users use Kerio WebMail and MS Outlook with Kerio Outlook Connector toaccess their mailboxes.Note: If any problems regarding message decoding occur, the Debug log may help whereit is necessary to enable the Message decoding option. See chapter 22.8 for more information.Security Policy tabKerio MailServer allows setting of security policies, i.e. the minimum required security level.These settings can be established in the Configuration → Advanced Options section in theSecurity policy tab (see picture 15.17).Figure 15.17Security Policy tabThe menu at the top of the page allows you to choose from one of these policies:No restrictionsSelf explanatory.Require secure authenticationKerio MailServer will always require secure user authentication. This implies that theauthentication must be performed by using one of these methods — CRAM-MD5, DIGEST-MD5, NTLM, or the user must use an SSL tunnel (by enabling SSL traffic in their emailclients).If users access their email by Kerio WebMail where no one of the authentication methodscan be applied, the SSL-secured HTTP protocol is used automatically.Once the secured authentication is set, it is possible to allow non-secured connectionsfrom a specified IP group. This group can be either selected from existing groups ora new one can be created. For details on IP groups definition, refer to chapter 12.1.Warning: Do not apply this method if users use saving passwords on the server in SHAformat.Require encrypted connectionWhen this option is activated, client applications will be able to connect to any serviceusing an encrypted connection (the communication cannot be tapped).159