VERIFIED SOLUTION i

Ensuring that the security of OfficeMail product is sufficient

Steps to ensure that the security of OfficeMail product is sufficient.
  1. Ensure that Operating system security patches are always installed
  2. Ensure that the MS Internet Information Service security patches are always installed
  3. Ensure that the OfficeMail version is the latest available (4.0.11 currently)
  4. Ensure that MS SQL server security patches are always installed
  5. Only allow HTTPS connection to Admin and User Websites
  6. Keep the Admin Website behind your own internal firewall, without external access
  7. Enforce password security policy
Environment Details
Product Feature: User Website
Operating System: Windows Server Platform
Database: MS SQL
UPDATED:  December 14, 2018