Microsoft Lync For Os X Full Communication Is

This can be enforced by a policy which requires that the initial login request (always NTLM or Kerberos based) is only performed from inside the internal network.

Lync can be integrated with SharePoint or Exchange to extend its functionalities.

Users can e.g. search for specific skills within the Lync client when SharePoint integration is enabled.

Exchange is used as a unified store of different user specific data, like contact list.

Therefore, its important to know the issues when implementing Lync and especially the hot spots for weaknesses to keep in mind during concept creation.

This blog post will describe some of the top issues, without formal priority.

Encryption is for example used by default and cannot be turned off since Lync Server 2013.

Furthermore, internal user authentication is handled via Kerberos or client-certificates.

Additionally, external users can authenticate themselves with NTLM.

When not using Federations and external access, many security implications could be eliminated if no Edge server is in use.

On the other side, the ease of the use of external access is a great advantage in Lync.

Edge Server allows us to communicate and collaborate with users located outside the firewall.

Remote users (internal users working outside the network) or users from other companies (Federations) connect into the network through the Edge server.

All Web components, such as Address Book or the Control Panel (administration panel) are located on the Front-End-Server.

Directors can authenticate requests before they are passed to the internal servers.

DoS attacks ends on the Directors and dont reach the Front-End-Servers.

Federations give the possibility to communicate between different companies using Microsofts unified communication software.

Microsoft Lync For Os X Full Communication Is

Full communication is possible (VoIP, messaging, conferencing).

Otherwise, it enables open federation where companies looking to federate will locate each other through the DNS SRV records and connect automatically.

This must be considered and kept in mind when using Federations or other external access.

The authentication itself is performed by either one of these two servers inside the network against the Active Directory (AD).

NTLM authentication is used when certificates arent available.