{"id":34955,"date":"2019-10-31T22:01:30","date_gmt":"2019-10-31T19:01:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/zimbra-collaboration-suite-i-kontrol-za-mobilnymi-ustrojstvami-s-pomoshhyu-abq\/"},"modified":"2019-10-31T22:01:30","modified_gmt":"2019-10-31T19:01:30","slug":"zimbra-collaboration-suite-i-kontrol-za-mobilnymi-ustrojstvami-s-pomoshhyu-abq","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/zimbra-collaboration-suite-i-kontrol-za-mobilnymi-ustrojstvami-s-pomoshhyu-abq","title":{"rendered":"Zimbra Collaboration Suite og kontrol over mobile enheder ved hj\u00e6lp af ABQ","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Den hurtige udvikling af b\u00e6rbar elektronik, is\u00e6r smartphones og tablets, har skabt mange nye udfordringer for virksomhedens informationssikkerhed. Faktisk, hvis hele cybersikkerheden tidligere var baseret p\u00e5 at opbygge en sikker perimeter og derefter beskytte den, er det nu blevet meget sv\u00e6rt at kontrollere sikkerhedsperimeteret, n\u00e5r n\u00e6sten hver medarbejder bruger sine egne mobile enheder til at l\u00f8se arbejdsopgaver. Dette er is\u00e6r relevant for store virksomheder, hvor hver medarbejder har loginoplysninger til e-mail og andre virksomhedsmidler. Ofte, n\u00e5r medarbejderen k\u00f8ber en ny smartphone eller tablet, indtaster de deres loginoplysninger, ofte uden at logge ud fra den gamle enhed. Selv hvis der kun er 5% s\u00e5danne uansvarlige medarbejdere i virksomheden, vil manglende kontrol fra administratorens side g\u00f8re situationen problematisk med hensyn til adgangen for mobile enheder til e-mail. server<\/a> det hurtigt udvikler sig til et rent kaos.<\/p>\n

\"Zimbra<\/a><\/noindex><\/p>\n

Desuden bliver mobile enheder ofte tabt eller stj\u00e5let og anvendes derefter til at finde kompromitterende oplysninger samt f\u00e5 adgang til virksomhedens ressourcer og data, der udg\u00f8r forretningshemmeligheder. Som regel er den st\u00f8rste trussel mod virksomhedens cybersikkerhed, n\u00e5r angribere f\u00e5r adgang til en medarbejders e-mail. Dette giver dem adgang til den globale adresse- og kontaktliste, til m\u00f8deplanen, som den uheldige medarbejder skulle have deltaget i, samt til deres korrespondance. Derudover f\u00e5r angriberne mulighed for at sende phishing- eller malware-inficerede e-mails fra en betroet e-mail-adresse. Alt dette samlet giver angriberne n\u00e6sten ubegr\u00e6nsede muligheder for at udf\u00f8re cyberangreb samt anvende social engineering for at n\u00e5 deres m\u00e5l.<\/p>\n

For monitoring mobile devices within the security perimeter, there is the ABQ technology, or Allow\/Block\/Quarantine. It enables the administrator to manage a list of mobile devices authorized to sync data with the mail server, and if necessary, block compromised devices and quarantine suspicious mobile devices.<\/p>\n

However, as any administrator of the free version of Zimbra Collaboration Suite Open-Source Edition knows, its interaction capabilities with mobile devices are severely limited. Strictly speaking, users of the free version of Zimbra can only send and receive emails via the POP3 or IMAP protocols, without the built-in capability to sync calendar, address book, and notes data with the server. The ABQ technology is also not implemented in the free version of Zimbra Collaboration Suite, which automatically jeopardizes any attempts to create a closed information perimeter in the organization. In situations where the administrator is unaware of which devices are connecting to their server, information leaks may occur, and the risk of a cyber attack, as previously described, increases significantly.<\/p>\n

The issue in Zimbra Collaboration Suite Open-Source Edition can be addressed with the modular extension Zextras Mobile. This extension allows the addition of full ActiveSync protocol support to the free version of Zimbra and thus opens up numerous opportunities for interaction between mobile devices and your mail server. Among various other functions, the Zextras Mobile extension fully supports ABQ.<\/p>\n

We would like to warn that since incorrectly configured ABQ can result in some users being unable to sync data on their mobile devices with the server, one should approach its configuration with maximum care and caution. The ABQ is configured from the Zextras command line. It is specifically in the command line that the operation mode of ABQ in Zimbra is set up, and device lists are managed.<\/p>\n

Det er implementeret p\u00e5 f\u00f8lgende m\u00e5de: Efter at brugeren logger ind p\u00e5 firmaposten p\u00e5 sin mobile enhed, sender han loginoplysninger til serveren, samt identifikationsoplysninger fra sin enhed, som m\u00f8der en forhindring i form af ABQ, der gennemg\u00e5r identifikationsoplysningerne og sammenligner dem med dem, der findes p\u00e5 listen over tilladte, quarant\u00e6ne og blokerede enheder. Hvis enheden ikke findes p\u00e5 nogen af listerne, handler ABQ i overensstemmelse med den driftsmode, den er indstillet til. <\/p>\n

ABQ i Zimbra omfatter tre driftsmodi:<\/p>\n

Tilladende (Permissive)<\/b>: I denne driftsmode, efter brugerens autentificering, sker synkronisering automatisk ved den f\u00f8rste anmodning fra den mobile enhed. I denne driftsmode er der mulighed for at blokere enkelte enheder, men alle andre vil kunne synkronisere data med serveren uden restriktioner. <\/p>\n

Interaktiv (Interactive)<\/b>: I denne driftsmode, straks efter brugerens autentificering, anmoder sikkerhedssystemet om enhedens identifikationsoplysninger og sammenligner dem med listen over tilladte enheder. Hvis enheden er p\u00e5 den tilladte liste, forts\u00e6tter synkroniseringen automatisk. Hvis enheden ikke er p\u00e5 'hvidlisten', vil den automatisk blive placeret i karant\u00e6ne, s\u00e5 administratoren senere kan beslutte, om enheden skal have tilladelse til at synkronisere med serveren eller blokkeres. Brugerens vil modtage en tilsvarende meddelelse. Administratoren informeres regelm\u00e6ssigt, \u00e9n gang hver indstillet periode. Hver ny meddelelse vil kun indeholde nye enheder, der er kommet i karant\u00e6ne.<\/p>\n

Streng (Strict)<\/b>: I denne driftsmode, efter brugerens autentificering, udf\u00f8res der straks en kontrol af, hvorvidt enhedens identifikationsoplysninger er p\u00e5 listen over tilladte. Hvis enheden er der, forts\u00e6tter synkroniseringen automatisk. Hvis enheden ikke er p\u00e5 listen over tilladte, bliver den straks sat p\u00e5 listen over blokerede, og brugeren modtager en tilsvarende meddelelse via e-mail.<\/p>\n

Hvis \u00f8nskes, kan Zimbra-administratoren helt deaktivere ABQ p\u00e5 sin mailserver. serveren<\/a>.<\/p>\n

Konfiguration af ABQ-arbejdsmodus udf\u00f8res ved hj\u00e6lp af kommandoer:<\/p>\n

zxsuite config global set attribute abqMode value Permissive
\nzxsuite config global set attribute abqMode value Interactive
\nzxsuite config global set attribute abqMode value Strict
\nzxsuite config global set attribute abqMode value Disabled<\/b><\/p><\/blockquote>\n

\nDu kan finde ud af den aktuelle ABQ-arbejdsmodus ved hj\u00e6lp af kommandoen zxsuite config global get attribute abqMode<\/b>.<\/p>\n

Hvis du bruger interaktive eller strenge ABQ-arbejdsmodi, skal du ofte arbejde med lister over tilladte og blokerede enheder samt enheder i karant\u00e6ne. Antag, at vores server er blevet tilsluttet af to enheder: en iPhone og en Android med de relevante legitimationsoplysninger. Senere viser det sig, at iPhone blev k\u00f8bt af virksomhedens direkt\u00f8r for nylig, og han besluttede at arbejde med mailen p\u00e5 den, mens Android tilh\u00f8rer en almindelig leder, der ikke har ret til at bruge arbejdsmailen p\u00e5 sin smartphone af sikkerhedsm\u00e6ssige \u00e5rsager.<\/p>\n

I tilf\u00e6lde af den interaktive tilstand vil alle enheder blive sendt til karant\u00e6ne, hvor administratoren skal flytte iPhone til listen over tilladte enheder og Android til listen over blokerede. For dette bruger han kommandoerne zxsuite mobile abq allow iPhone<\/b> og zxsuite mobile abq block Android<\/b>. Derefter vil direkt\u00f8ren kunne arbejde med mailen fra sine enheder, mens lederen stadig kun skal gennemse den fra sin arbejdsb\u00e6rbar computer.<\/p>\n

Det er v\u00e6rd at bem\u00e6rke, at selvom lederen indtaster sit login og kodeord korrekt p\u00e5 sin Android-enhed i den interaktive tilstand, vil han stadig ikke f\u00e5 adgang til sin konto, men i stedet komme ind i en virtuel mailboks, hvor han vil modtage en meddelelse om, at hans enhed er blevet tilf\u00f8jet til karant\u00e6ne, og han vil ikke v\u00e6re i stand til at bruge mailen fra den.<\/p>\n

\"Zimbra
\n
\nI tilf\u00e6lde af den strenge tilstand vil alle nye enheder blive blokeret, og efter at det er blevet afklaret, hvem de tilh\u00f8rte, vil administratoren kun kunne tilf\u00f8je direkt\u00f8rens iPhone til listen over tilladte enheder ved hj\u00e6lp af kommandoen zxsuite mobile ABQ set iPhone Allowed<\/b>, mens telefonen til lederen forbliver der.<\/p>\n

Den till\u00e5tna driftsmodellen \u00e4r svagt kompatibel med n\u00e5gra s\u00e4kerhetsregler p\u00e5 f\u00f6retaget, men om det \u00e4nd\u00e5 uppst\u00e5r behov av att blockera n\u00e5gon av de till\u00e5tna mobila enheterna, till exempel om en chef pl\u00f6tsligt sagt upp sig i skandal, kan detta g\u00f6ras med kommandot zxsuite mobile ABQ set Android Blocked<\/b>.<\/p>\n

Om f\u00f6retaget f\u00f6r arbetet med e-post tillhandah\u00e5ller tj\u00e4nstegadgets till anst\u00e4llda, kan enheten vid n\u00e4sta \u00e4garbyte helt tas bort fr\u00e5n ABQ-listorna, s\u00e5 att man senare kan besluta om den ska till\u00e5tas synkronisering med servern eller inte. Detta g\u00f6rs med kommandot zxsuite mobile ABQ delete Android<\/b>.<\/p>\n

Som ni kan se, med Zextras Mobile-till\u00e4gget i Zimbra kan man implementera ett mycket flexibelt system f\u00f6r att kontrollera anv\u00e4nda mobila enheter, vilket passar b\u00e5de f\u00f6r f\u00f6retag med ganska strikta riktlinjer f\u00f6r anv\u00e4ndning av f\u00f6retagsresurser utanf\u00f6r kontoret och f\u00f6r de f\u00f6retag som \u00e4r ganska liberala i detta avseende.
\n
Kilde: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u0440\u0435\u043c\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u043f\u043e\u0440\u0442\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u0438\u043a\u0438 \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u0438 \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u043e\u0432, \u0441\u043e\u0437\u0434\u0430\u043b\u043e \u043c\u0430\u0441\u0441\u0443 \u043d\u043e\u0432\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0435\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0442\u0440\u043e\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430 \u0438 \u0435\u0433\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u043e\u0445\u0440\u0430\u043d\u0435, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0437\u0430\u0434\u0430\u0447 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b\u043e \u043e\u0447\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u044d\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26308,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34955","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zimbra Collaboration Suite och kontroll \u00f6ver mobila enheter med ABQ | ProHoster","description":"Den snabba utvecklingen av b\u00e4rbar elektronik och i synnerhet smartphones och surfplattor har skapat en m\u00e4ngd nya utmaningar f\u00f6r f\u00f6retags informationss\u00e4kerhet.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/zimbra-collaboration-suite-i-kontrol-za-mobilnymi-ustrojstvami-s-pomoshhyu-abq","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Zimbra Collaboration Suite \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0437\u0430 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e ABQ | ProHoster","og:description":"\u0421\u0442\u0440\u0435\u043c\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u043f\u043e\u0440\u0442\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u0438\u043a\u0438 \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u0438 \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u043e\u0432, \u0441\u043e\u0437\u0434\u0430\u043b\u043e \u043c\u0430\u0441\u0441\u0443 \u043d\u043e\u0432\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/zimbra-collaboration-suite-i-kontrol-za-mobilnymi-ustrojstvami-s-pomoshhyu-abq","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:01:30+00:00","article:modified_time":"2019-10-31T19:01:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34955","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:50:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:12:27","updated":"2026-02-09 21:50:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/34955","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=34955"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/34955\/revisions"}],"predecessor-version":[{"id":160132,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/34955\/revisions\/160132"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/26308"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=34955"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=34955"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=34955"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}