Re: Why is pop3 disabled by default on Exchange 2003



Two reasons come to mind why I'd want it disabled by default:
1) reduction in security attack area
2) security reasons

POP3 was defined before security was a concern. POP3 is inherently insecure
in that it sends account and password information in the clear. It is also
difficult to manage because by default it puts company information on
distributed devices and therefore outside the control of company resource
managers.

Are you writing a paper or taking a test?



"Dave Crozier" <mdcrozier@xxxxxxxxx> wrote in message
news:%23lcdfy4jFHA.2180@xxxxxxxxxxxxxxxxxxxxxxx
> Hi all,
>
> I've been asked to explain why pop3 is disabled by default in Exch 2003.
>
> Does anyone have any information explaining why???
>
> Help Help Help
>
> Dave
>


.



Relevant Pages

  • << Small Bus Server news of the week>>
    ... The POP3 Connector service connects and logs on to the remote POP3 ... will pick up the mail that is in the Incoming Mail folder. ... A Chinese security group has released sample ... A California blood bank has retrieved a stolen ...
    (microsoft.public.backoffice.smallbiz)
  • << Small Bus Server news of the week>>
    ... The POP3 Connector service connects and logs on to the remote POP3 ... will pick up the mail that is in the Incoming Mail folder. ... A Chinese security group has released sample ... A California blood bank has retrieved a stolen ...
    (microsoft.public.backoffice.smallbiz2000)
  • << Small Bus Server news of the week>>
    ... The POP3 Connector service connects and logs on to the remote POP3 ... will pick up the mail that is in the Incoming Mail folder. ... A Chinese security group has released sample ... A California blood bank has retrieved a stolen ...
    (microsoft.public.windows.server.sbs)
  • [UNIX] AS/400 Users Enumeration via POP3
    ... Get your security news from a reliable source. ... The POP3 service installed on all modern AS/400 servers, ... To access a POP3 server, you must authenticate and provide a user and a ... profiles, POP3 will authenticate any valid user profile, and the service ...
    (Securiteam)
  • Re: security implications of allowing WAN access to LAN pop3 server.
    ... There are security issues with allowing any port from your wan to your ... Implement a web based e-mail system that uses SSL to encrypt all ... > allow POP3 retrieval from the LAN to the WAN and setting up the ...
    (comp.security.firewalls)