[cisco-voip] Unity Connection 8.5 Single Inbox and WebDAV

[Matthew Loraditch]

Well WebDAV is required for the UM and is not necessarily installed by default so if you only set it up for UM  I think an ACL of some sort would be fine and may be safer than messing with IIS.
If you want to try IIS, be aware that Exchange has some very specific IIS Settings, but you can if you like do a properties on the webdav folder in IIS and then use IP restrictions under Directory Security Tab and give that a whirl.

I used to do Exchange/IIS/Windows back in the day primarily and am still the primary backup for that stuff here so feel free to ask me any questions you might have




Matthew Loraditch, CCVP, CCNA, CCDA
1965 Greenspring Drive
Timonium, MD 21093
support at heliontechnologies.com<mailto:support at heliontechnologies.com>
(p) (410) 252-8830
(F) (443) 541-1593

Visit us at www.heliontechnologies.com<http://www.heliontechnologies.com/>
Support Issue? Email support at heliontechnologies.com<mailto:support at heliontechnologies.com> for fast assistance!

From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Dennis Heim
Sent: Tuesday, September 27, 2011 1:53 PM
To: Jason Aarons (AM); cisco-voip (cisco-voip at puck.nether.net)
Subject: Re: [cisco-voip] Unity Connection 8.5 Single Inbox and WebDAV

Maybe some ACL style action to limited webdav access, but like you Exchange is not my primary language. I suspect they probably have gear still running telnet.

Dennis Heim
Network Voice Engineer
CDW  Advanced Technology Services
10610 9th Place
Bellevue, WA 98004

317.569.4255 Single Number Reach
317.569.4201 Fax
dennis.heim at cdw.com<mailto:dennis.heim at cdw.com>
cdw.com/content/solutions/unified-communications/<http://www.cdw.com/content/solutions/unified-communications/>

From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Jason Aarons (AM)
Sent: Tuesday, September 27, 2011 10:47 AM
To: cisco-voip (cisco-voip at puck.nether.net)
Subject: [cisco-voip] Unity Connection 8.5 Single Inbox and WebDAV

A customer switched from Unity Unified Messaging (with Exchange 2003) to Unity Connection 8.5 Single Inbox earlier this year.

A recent bank PCI Compliance Audit (probabaly a security scan tool) flagged WebDAV on the Exchange 2003 Server.

Can I just use IIS Manager on the Exchange Server to limit WebDAV access? I'm not a WebDAV guru.  It's more of an Exchange issue as I see it.  There is not shortage of WebDAV security bulletins from Microsoft, I suspect the Exchange box may not be patched up to date.

Customer isn't ready yet to switch to 2K10/EWS.

Jason Aarons
Consultant
Dimension Data
904-338-3245 mobile

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20110927/f8c60775/attachment.html>