Secure Mobile Access 100 10.2 Administration Guide

Table of Contents

Adding the OWA PERMIT Policies

In this section, add two OWA PERMIT policies for both Mega_Group and IT_Group to access the OWA service using Secure Web (HTTPS).

This procedure creates a policy for the Secure Mobile Access Local Group, Mega_Group, and results in OWA access for members of the Active Directory group, Mega Group.

To access the Exchange server, adding a PERMIT policy to the 10.200.1.10/exchange URL Object itself is not enough. Another URL Object policy is needed that permits access to 10.200.1.10/exchweb, because some OWA Web contents are located in the exchweb directory.

Repeat this procedure for IT_Group to provide OWA access for members of the Active Directory group, IT Group.

In this configuration, members of IT_Group and Mega_Group are denied access to the https://owa-server/public folder, because these groups have access only to the /exchange and /exchweb subfolders.

The OWA policies are applied to Exchange server URL Objects rather than server IP addresses because OWA is a Web service.

  1. In the Users > Local Groups page, click Configure in the Mega_Group row. Create two PERMIT policies for Mega_Group to allow access to the OWA Exchange server.
  2. In the Edit Local Group 'Mega_group' window, click the Policies tab, and then click Add Policy.

  3. In the Add User Policy window, select URL Object in the Apply Policy To drop-down menu.

  4. In the Policy Name field, enter the descriptive name, OWA.
  5. In the Service drop-down menu, select Secure Web (HTTPS).
  6. In the URL field, enter the URL of the target application, 10.200.1.10/exchange.
  7. In the Status drop-down menu, select ALLOW, and then click Submit.
  8. In the Edit Local Group 'Mega_group' window on the Policies tab, click Add Policy.

  9. In the Add User Policy window, select URL Object in the Apply Policy To drop-down menu.

  10. In the Policy Name field, enter the descriptive name, OWA exchweb.
  11. In the Service drop-down menu, select Secure Web (HTTPS).
  12. In the URL field, enter the URL of the target application, 10.200.1.10/exchweb.
  13. In the Status drop-down menu, select ALLOW, and then click Submit.

  14. We are finished with the policies for Mega_Group. Repeat this procedure for IT_Group to provide OWA access for members of the Active Directory group, IT Group.