{"id":34955,"date":"2019-10-31T22:01:30","date_gmt":"2019-10-31T19:01:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/zimbra-collaboration-suite-i-kontrol-za-mobilnymi-ustrojstvami-s-pomoshhyu-abq\/"},"modified":"2019-10-31T22:01:30","modified_gmt":"2019-10-31T19:01:30","slug":"zimbra-collaboration-suite-i-kontrol-za-mobilnymi-ustrojstvami-s-pomoshhyu-abq","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/zimbra-collaboration-suite-i-kontrol-za-mobilnymi-ustrojstvami-s-pomoshhyu-abq","title":{"rendered":"Zimbra koost\u00f6\u00f6 komplekt ja mobiilseadmete kontroll ABQ abil","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kandiliste elektroonikaseadmete, sealhulgas nutitelefonide ja tahvelarvutite kiire areng on toonud kaasa hulga uusi v\u00e4ljakutseid ettev\u00f5tte infotehnoloogia turvalisusele. Kui varem tugines kogu k\u00fcberturvalisus kaitstud perimeetri loomisele ja selle j\u00e4rgnevale kaitsmisele, siis n\u00fc\u00fcd, kui praktiliselt iga t\u00f6\u00f6taja kasutab oma t\u00f6\u00f6\u00fclesannete t\u00e4itmiseks oma mobiilseadmeid, on turvaperimeetri kontrollimine muutunud v\u00e4ga keeruliseks. See on eriti aktuaalne suurte ettev\u00f5tete puhul, kus igal t\u00f6\u00f6tajal on oma e-posti ja teiste ettev\u00f5ttesiseste ressursside jaoks sisselogimise andmed. Tihti, ostes uusi nutitelefone v\u00f5i tahvelarvuteid, sisestavad t\u00f6\u00f6tajad neisse oma kasutajakontosid, tihti unustades samal ajal logida v\u00e4lja vanast seadmest. Isegi kui selliseid vastutustundetuid t\u00f6\u00f6tajaid on ettev\u00f5ttes vaid 5%, ilma adekvaatse kontrollita administraatori poolt muutub mobiilseadmete juurdep\u00e4\u00e4s e-postile t\u00f5eliseks probleemiks. serveri<\/a> see muutub kiiresti t\u00e4ielikuks segaduseks.<\/p>\n

\"Zimbra<\/a><\/noindex><\/p>\n

Lisaks kaovad mobiilseadmed \u00fcsna sageli v\u00f5i neid varastatakse ning hiljem kasutatakse neid kompromiteeriva info leidmiseks ning juurdep\u00e4\u00e4suks ettev\u00f5tte ressurssidele ja andmetele, mis on \u00e4risaladused. \u00dcldiselt toovad ettev\u00f5tte k\u00fcberturvalisusele suurimat kahju k\u00fcberkurjategijate juurdep\u00e4\u00e4s t\u00f6\u00f6taja e-posti kontole. Selle abil saavad nad ligip\u00e4\u00e4su globaalsele aadresside ja kontaktide nimekirjale, kohtumiste ajakavale, milles oli osalema peaks mitte \u00f5nnega koos t\u00f6\u00f6taja, samuti tema kirjavahetusele. Lisaks saavad ettev\u00f5tte meili saanud k\u00fcberkurjategijad saata usaldusv\u00e4\u00e4rsest e-posti aadressist phishing v\u00f5i viiruslike kirjadega. K\u00f5ik see koos annab r\u00fcndajatele praktiliselt piiramatu v\u00f5imaluse k\u00fcberr\u00fcnnakute l\u00e4biviimiseks ning sotsiaalse insenerit\u00f6\u00f6 kasutamiseks oma eesm\u00e4rkide saavutamiseks.<\/p>\n

K\u00fcberturvalisuse piiridesse kuuluvate mobiilseadmete j\u00e4lgimiseks on olemas ABQ-tehnoloogia, ehk Allow\/Block\/Quarantine. See v\u00f5imaldab administraatoril hallata mobiilseadmete nimekirja, millel on lubatud andmete s\u00fcnkroonimine postiserveriga, ning vajadusel blokeerida kompromiteeritud seadmed ja panna kahtlased mobiilseadmed karantiini.<\/p>\n

Kuid nagu iga tasuta versiooni Zimbra Collaboration Suite Open-Source Edition administraator teab, on selle mobiilseadmete integreerimise v\u00f5imalused v\u00e4ga piiratud. T\u00e4psemalt saavad tasuta Zimbra kasutajad ainult e-kirju saata ja vastu v\u00f5tta POP3 v\u00f5i IMAP protokolli kaudu, ilma sisseehitatud v\u00f5imaluseta s\u00fcnkroonida kalendri, aadressiraamatute ja m\u00e4rkmete andmeid serveriga. Tasuta versioonis Zimbra Collaboration Suite ei ole ka ABQ-tehnoloogiat, mis t\u00e4hendab, et k\u00f5ik katsed luua ettev\u00f5tte sisemist infopiirangut on eelnevalt kahtluse alla seatud. Olukorras, kus administraator ei tea, millised seadmed on tema serveriga \u00fchendatud, v\u00f5ivad ettev\u00f5ttes tekkida teabe lekked ning k\u00fcberr\u00fcnnaku t\u00f5en\u00e4osus t\u00f5useb tugevalt.<\/p>\n

Selle probleemi lahendamiseks Zimbra Collaboration Suite Open-Source Editionis aitab Zextras Mobile moodullaienemine. See laiendus v\u00f5imaldab tasuta versiooni Zimbra juurde tuua t\u00e4ieliku ActiveSync protokolli toe, avades t\u00e4nu sellele hulgaliselt v\u00f5imalusi mobiilsete seadmete ja teie postiserveri vaheliseks suhtlemiseks. Lisaks muudele erinevatele funktsioonidele on Zextras Mobile laienduses t\u00e4ielik ABQ-toe implementatsioon.<\/p>\n

Tuleb kohe hoiatada, et vale konfiguratsioon ABQ-s v\u00f5ib p\u00f5hjustada olukorra, kus m\u00f5ned kasutajad ei saa andmeid oma mobiilseadmetes serveriga s\u00fcnkroonida, seega tuleb sellele seadistusele l\u00e4heneda \u00e4\u00e4rmise ettevaatlikkuse ja hoolikuse l\u00e4kiviimisega. ABQ seadistamine toimub Zextras k\u00e4surealt. Just k\u00e4surealt seadistatakse ABQ t\u00f6\u00f6re\u017eiim Zimbras ja hallatakse seadmete nimekirju.<\/p>\n

See here is how it is implemented: After the user logs into the corporate email on a mobile device, they send their authentication credentials and device identifiers to the server, which encounter an obstacle in the form of ABQ. The ABQ reviews the identifiers and checks them against the allowed, quarantined, and blocked device lists. If the device is not present in any of the lists, the ABQ processes it according to the mode in which it operates. <\/p>\n

ABQ in Zimbra provides three operating modes:<\/p>\n

Permissive<\/b>: In this mode, after user authentication, synchronization is performed automatically at the first request from the mobile device. In this mode, it is possible to block individual devices, but all others will be able to freely synchronize data with the server. <\/p>\n

Interactive<\/b>: In this mode, immediately after user authentication, the security system requests the device's identification data and matches it with the list of allowed devices. If the device is on the allowed list, synchronization automatically continues. If it is not in the device's \"whitelist\", it will be automatically placed in quarantine so that the administrator can later decide whether to allow synchronization with the server or to block it. A corresponding notification will be sent to the user. The administrator will be informed regularly, once during a customizable period. Each new notification will contain only the new devices that have entered quarantine.<\/p>\n

Strict<\/b>: In this mode, after the user is authenticated, a check is immediately conducted for the presence of the device's identification data in the list of allowed devices. If it is present, synchronization automatically continues. If the device is not in the allowed list, it is immediately placed on the blocked list, and the user receives a corresponding notification via email.<\/p>\n

Samuti v\u00f5ib Zimbra administraator t\u00e4ielikult keelata ABQ oma meiliserveris, kui ta soovib. serveris<\/a>.<\/p>\n

ABQ t\u00f6\u00f6re\u017eiimi seadistamine toimub j\u00e4rgmiste k\u00e4skude abil:<\/p>\n

zxsuite config global set attribute abqMode value Permissive
\nzxsuite config global set attribute abqMode value Interactive
\nzxsuite config global set attribute abqMode value Strict
\nzxsuite config global set attribute abqMode value Disabled<\/b><\/p><\/blockquote>\n

\nABQ praeguse t\u00f6\u00f6re\u017eiimi saab teada j\u00e4rgmise k\u00e4su abil: zxsuite config global get attribute abqMode<\/b>.<\/p>\n

Kui kasutate interaktiivset v\u00f5i ranget ABQ t\u00f6\u00f6re\u017eiimi, peate sageli t\u00f6\u00f6tama lubatud ja blokeeritud seadmete loenditega ning ka karantiinis olevate seadmetega. Oletame, et meie serveriga on \u00fchendatud kaks seadet: \u00fcks iPhone ja \u00fcks Android koos vastavate identifitseerimisandmetega. Hiljem selgub, et iPhone'i ostis ettev\u00f5tte tegevjuht, kes otsustas kasutada seda oma meili jaoks, samas kui Android kuulub tavalisele juhile, kellel ei ole lubatud kasutada t\u00f6\u00f6meili nutitelefonis turvakaalutlustel.<\/p>\n

Interaktiivse re\u017eiimi puhul l\u00e4hevad k\u00f5ik need seadmed karantiini, kust administraator peab iPhone'i lubatud seadmete nimekirja \u00fcle viima ja Android'i blokeeritud seadmete nimekirja. Selleks kasutab ta j\u00e4rgmisi k\u00e4ske: zxsuite mobile abq allow iPhone<\/b> ja zxsuite mobile abq block Android<\/b>. P\u00e4rast seda saab tegevjuht oma seadmetelt meilidega t\u00e4ies mahus t\u00f6\u00f6tada, samas kui juhil tuleb endiselt vaadata neid ainult oma t\u00f6\u00f6 s\u00fclearvutist.<\/p>\n

Oluline on m\u00e4rkida, et interaktiivse re\u017eiimi kasutamisel, isegi kui juht sisestab oma Android-seadmest \u00f5iged sisselogimisandmed, ei saa ta siiski oma kontole sisse logida, vaid p\u00e4\u00e4seb virtuaalsesse postkasti, kus ta saab teate selle kohta, et tema seade on karantiini lisatud, ning ei saa kasutada sealt meili.<\/p>\n

\"Zimbra
\n
\nRanget re\u017eiimi kasutades blokeeritakse k\u00f5ik uued seadmed ja p\u00e4rast seda, kui selgub, kellele nad kuulusid, peab administraator lihtsalt lisama tegevjuhi iPhone'i lubatud seadmete nimekirja j\u00e4rgmise k\u00e4sku abil: zxsuite mobile ABQ set iPhone Allowed<\/b>, j\u00e4ttes juhtmehe telefoni sinna.<\/p>\n

K\u00e4ivitusre\u017eiim on n\u00f5rkalt koosk\u00f5las ettev\u00f5tte turvareeglitega; siiski, kui tekib vajadus blokeerida m\u00f5ni lubatud mobiilseade, n\u00e4iteks kui juhataja ootamatult konfliktiga lahkub, saab seda teha k\u00e4su abil. zxsuite mobile ABQ set Android Blocked<\/b>.<\/p>\n

Kui ettev\u00f5ttel on t\u00f6\u00f6tajatele posti kasutamiseks antud ametigadgetid, siis seadme omandi vahetumise korral saab selle t\u00e4ielikult eemaldada ABQ nimekirjadest, et hiljem otsustada, kas lubada selle s\u00fcnkroonimist serveriga. See toimub k\u00e4su abil. zxsuite mobile ABQ delete Android<\/b>.<\/p>\n

Nagu n\u00e4ha, v\u00f5imaldab Zextras Mobile laienduse kaudu Zimbra luua v\u00e4ga paindliku mobiilseadmete kontrolli s\u00fcsteemi, mis sobib nii ettev\u00f5tetele, kellel on range poliitika ettev\u00f5tte ressursside kasutamise osas v\u00e4ljaspool kontorit, kui ka neile, kelle poliitika on selles osas \u00fcsna liberaalne.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u0440\u0435\u043c\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u043f\u043e\u0440\u0442\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u0438\u043a\u0438 \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u0438 \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u043e\u0432, \u0441\u043e\u0437\u0434\u0430\u043b\u043e \u043c\u0430\u0441\u0441\u0443 \u043d\u043e\u0432\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0435\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0442\u0440\u043e\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430 \u0438 \u0435\u0433\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u043e\u0445\u0440\u0430\u043d\u0435, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0437\u0430\u0434\u0430\u0447 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b\u043e \u043e\u0447\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u044d\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26308,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34955","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zimbra Collaboration Suite ja mobiilsete seadmete kontroll ABQ abil | ProHoster","description":"Kandekeskkonna kiire areng, eriti nutitelefonide ja tahvelarvutite valdkonnas, on loonud hulga uusi v\u00e4ljakutseid ettev\u00f5tte infotehnoloogia turvalisusele.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/zimbra-collaboration-suite-i-kontrol-za-mobilnymi-ustrojstvami-s-pomoshhyu-abq","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Zimbra Collaboration Suite \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0437\u0430 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e ABQ | ProHoster","og:description":"\u0421\u0442\u0440\u0435\u043c\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u043f\u043e\u0440\u0442\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u0438\u043a\u0438 \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u0438 \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u043e\u0432, \u0441\u043e\u0437\u0434\u0430\u043b\u043e \u043c\u0430\u0441\u0441\u0443 \u043d\u043e\u0432\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/zimbra-collaboration-suite-i-kontrol-za-mobilnymi-ustrojstvami-s-pomoshhyu-abq","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:01:30+00:00","article:modified_time":"2019-10-31T19:01:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34955","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:50:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:12:27","updated":"2026-02-09 21:50:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34955","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=34955"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34955\/revisions"}],"predecessor-version":[{"id":160132,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34955\/revisions\/160132"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/26308"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=34955"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=34955"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=34955"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}