For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Terrence's avatar
Terrence
Icon for Nimbostratus rankNimbostratus
Jun 05, 2013

Out of Continent Access Control

We have recently migrated to an exchange environment, from a not so widely popular email server. Since we migrated to this new environment we have had 10+ users comprimised by very simple spear phis...
BIG-IP Access Policy Manager (APM)
remote access
security
jwham20's avatar
jwham20
Icon for Nimbostratus rankNimbostratus
Jun 17, 2013
Terry,

 

 

Did you limit the number of senders OWA could send to based on GEO-IP? Or just a broad limiter?

 

 

Another option I always like is a forced 2 factor authentication when logging in from a new/unauth'd GEO-IP location. (IE: Bob is based in seattle, then trys to log in while on vacation in tahiti ). Could even use the google auth integration for cheap 2 factor auth:

 

 

https://devcentral.f5.com/tech-tips/articles/two-factor-authentication-with-google-authenticator-and-ldap

 

 

-Josh