Kerio Connect - Administrators Guide - Kerio Software Archive

Securing Kerio ConnectPassword policyFor information on passwords, read article Password policy in Kerio Connect.Configuring secure connection to Kerio ConnectKerio Connect can secure:• user authentication• whole communicationFor settings, go to section Configuration → Security → tab Security Policy (Configuration →Advanced Options → tab Security Policy for Kerio Connect 8.1 and older).You can define a group of IP addresses which will be allowed to authenticate insecurely (e.g.from local networks).Securing user authenticationKerio Connect will always require secure user authentication:• CRAM-MD5 — password authentication by using MD5 digests• DIGEST-MD5 — password authentication by using MD5 digests• NTLM — use only with Active Directory.• SSL tunnel (if no other authentication method is used)If users’ passwords are saved in the SHA format:• do not apply CRAM-MD5, DIGEST-MD5, NTLM• do not map users from a directory serviceEncrypting user communicationClient applications will connect to any service using encrypted connection (the communicationcannot be tapped).SSL must be allowed to all protocols on all client stations.Many SMTP servers do not support SMTPS and STARTTLS. To provide sufficient security, theSMTP server requires secure user authentication.98