Tag Info

Hot answers tagged

10

If you are using self-signed ssl then,While generating self-signed ssl certificate in server side,generate identity.p12 certificate and this certificate you need to use in identity section of IPCU. These few lines you can use to generate the idendtity.p12 //Creating the device Identity key and certificate request openssl genrsa 2048 > identity.key ...


9

Update (06/2011): As of iOS 5, Apple has introduced Reminders, a todo list app that works with Exchange: http://www.apple.com/ios/ios5/features.html#reminders There are many applications available in Apple's App Store that solve this problem. However, they're all paid applications with generally low customer reviews, so be careful when choosing which ...


9

Like Farseeker says, the issue is that what you call "computer names" are actually NetBIOS names. NetBIOS is a protocol of Sytek/IBM's own invention, which has been superceded by a naming service like DNS, so it is generally not supported on non-Windows machines. Linux and Unix machines can use NetBIOS through a thrid-party client called SAMBA, but the ...


8

As of the latest iPhone OS release (3.0) this is not possible. I am unsure if someone could create an 'all in one' client that connects to OpenVPN and then allows you to browse the web from within the same app. But certainly any app that connected to OpenVPN could not then be put into the background allowing you to use the built in Mobile Safari or Mobile ...


8

Encryption will never be "seamless" - particularly in a mixed environment. Similarly the idea that you'll be able to get outside agencies to adhere to your encryption policy is a noble goal, but may be difficult in practice (My company has been trying to get this to happen since before I came here. Some outside personnel are simply not going to be able to ...


7

ActiveSync doesn't use IMAP. ActiveSync is a "protocol" unto itself (HTTP / HTTPS-based). Exchange 2003's ActiveSync implementation, provided you've installed Service Pack 2, will work fine with iPhones (I've got several Customers doing it). Assuming you've got a single Exchange Server computer you'll need to allow access to port 80 and 443 from the ...


7

I'm not sure but the following changes in operating_systems.pm seem to work for us. Only the iPod didn't work in the OS section, it should be incl. under iPhone ...(not sure) in @OSSearchIDOrder add '[_+ ]cpu[_+ ]os', #iPad 'iphone[_+ ]os', before 'mac[_+ ]os[_+ ]x', in %OSHashID add '[_+ ]cpu[_+ ]os','maciosipad', 'iphone[_+ ]os','maciosiphone', ...


7

I have a dedicated page on my iPhone with useful applications: Jaadu RDP: the best Remote Desktop Client (RDP) for the iPhone I found. It's a very intuitive and powerful app. Snap: network scan (ports, services) Network Ping Lite: discover and ping IP addresses WiFiFiFom: detect and visualize wireless networks aSubNet: subnet mask calculator for IP ...


6

When we got ActiveSync going in Exchange 2007 several years ago we ran into an issue with certificate validation. Historically we'd used SSL certificates for OWA based on our own internal CA; if you work for us, you should use our CA, QED. However, mobile devices proved hard to convince to accept new CA certificates, so we ended up having to purchase ...


6

http://www.testexchangeconnectivity.com is the Microsoft site to use to check your connections from outside, you want the Exchange Activesync test, and be sure to use an account you can change the password after testing. On your firewall, you only need port 443 (HTTPS) from outside to the Exchange server. On the Exchange server, you need a certificate ...


6

The app NetPortal can do this. I've got it set on my non-jail broken phone. I connect the native VPN to the office network and I can browse the network. You don't map a drive just have "favourites" in the application and then open them up. http://itunes.apple.com/us/app/netportal-access-files-on/id323133602?mt=8


6

Ok, since you're only after a single phone, you would need to monitor something (DHCP or ARP table) and look for the MAC address of your phone. It won't change, as it's (meant to be) globally unique per network interface. However, there are some problems: DHCP leases last for a while. Just because there is a lease, that doesn't mean that the device is ...


5

They gave you an incomplete certificate chain; mobile browsers tend to be a little more sensitive to chain issues than others. The intermediate issuer certificate with a thumbprint of c039a3269ee4b8e82d00c53fa797b5a19e836f47 is being presented correctly, but the "root" certificate that your server is presenting isn't a root certificate at all; it's an ...


5

It's a legitimate address range - if Apple's using it as a default address for their routers, then they're doing it wrong. ARIN confirms that the whole 6.0.0.0/8 range is assigned to "USAISC", and if you take a look at a BGP looking glass, you'll see that 6.3.0.0/18 is being actively routed on the internet by AS668, which is assigned to the US DoD.


5

MacOS doesn't allow multiple GUI user sessions to be active simultanously, even with a remote connection. If you connect to it via Remote Desktop (which is basically VNC), you only see the content of the currently active session you would see on the local display. (Note: If you switch the session to another user, the programs don't get terminated, you just ...


5

To expand upon Simon's answer the iPhone requires that the subjectAltName of the VPN Server's certificate match either the hostname (it will check through dns) or the IP address of the server to which you're trying to connect. If this does not match you will get the "Could not validate server certificate" error. I was having this same problem and it took ...


5

Here's a fairly straight forward L2TP/IPSEC tutorial, but I don't think iphone can use certs, so you will have to go PSK. It also gets into domain authentication, so your users only have to remember one set of credentials. That is, if you have a domain... ...


5

the iPhone supports common VPN technologies like IPSec PPTP and L2TP this Iphone VPN Guide might answer some of your questions about it For a basic set up you might want to get a spare machine and loading Smoothwall or ipcop linux distributions. They have IPSec support built in, so it's quite easy to set up. This way you'll be able to experiment with some ...


5

Here are a few I have on my device: If you're monitoring Mac OS X machines, I've found that iStat is very useful. It also has ping and traceroute built in to do some basic network diagnostics. If you're a Slicehost user, the now-free Slicehost Pro is a great way to monitor your slices. If you use Google Analytics, the Analytics app is great to quickly ...


5

When you're in a windows environment, it can (and does) use NetBIOS to resolve the computer names, so if you do not have a central DNS server (like on a home network), it can still map names to IP addresses. The iPhone however does not support NetBIOS name resolution - because it is not a PC and it is lacking in this protocol. You will never see it included ...


4

I've found the iPhone implementation for business to be pretty good documented on the Apple site: http://www.apple.com/iphone/business/integration/ With the iPhone configuration utility, you can create profiles which help you standardize the installs. I'd recommend you start documenting your installs/setups and find what the best configuration will be for ...


4

There is no official support for OpenVPN on iOS. So unless you want to Jailbreak all your devices, there's no way this is going to work. Instead, you could setup an IPsec VPN using tools like strongSwan or by buying a commercial appliance. An entry level Cisco ASA isn't that expensive, even more so when considering the time it takes to set up and secure ...


4

There isn't functionality in the ActiveSync protocol to allow for what you're talking about (limiting its ability to affect unread flags, delete items, etc). I suspect you're going to have a tough time finding what you're looking for. You could do a "hack" by making a second mailbox for each phone user specified as an additional / alternate delivery ...


4

As I understand it, this issue affects Exchange transaction logs. You absolutely should not 'limit' these logs in any way. Transaction logs are committed to the exchange database and flushed after an exchange-aware backup. If you notice transaction logs growing, you have two options - move the logs to a drive that's big enough to hold a typical day's log ...


4

I'm afraid not sorry. That said the vast majority of iOS apps are either 100% compatible between v5 and v6 or need a simple recompile with the XCode 4.5 to be ready, and dev releases of v6 have been available for 4-months+. So it's a shame that your devs didn't put the effort into fixing the root-issue, it would've save you having to go out of your way to ...


4

Okay the first thing to is to try http://testexchangeconnectivity,com. If a server error 500 occurs it might be related to the fact that the user is in a protected group, and thus some inheritance gets removed every hour.. From http://technet.microsoft.com/en-us/library/dd439375%28EXCHG.80%29.aspx To check whether inheritance is disabled on the user: ...


3

I know of no way that you could see the behavior you're seeing now w/o changes to the IIS configuration outside of the installation of a new certificate. I'd strongly recommend restoring a backup of the IIS metabase from prior to any changes being made since, presumably, Active Sync was working fine "before". If you don't have a metabase backup then I'd ...


3

This apparently is an issue with iOS. It does not automatically pick up WPAD. You can work around this by going into the Wi-Fi settings for your network, setting the HTTP Proxy setting to Auto and entering http://wpad/wpad.dat? into the URL setting for the device.


3

There is certainly no way built in to Activesync as this covers a broad spectrum of manufacturers using Activesync and does not include vendor-specific options or software policies. Also, having looked through the iPhone configuration utility, I'm not sure Apple provide a workaround either. Seeing as nowadays from iOS 5 and up a connection to itunes is not ...


3

No-one's voted to close, so I'll make my comment into an answer: Why not run the check-out on the devices? Since you write apps, write one that locks the device until a user logs in. I wouldn't think it needs to be very secure, since it's being used in-house. To check a device out, the user simply takes it, logs in, and the app can transmit the fact that ...



Only top voted, non community-wiki answers of a minimum length are eligible