Preface
The supplied Securing Exchange Server and Outlook Web Access material is old enough that its product instructions cannot be used directly, but its threat categories remain valuable: unnecessary services, SMTP relay, unencrypted remote access, weak client security, excessive mailbox permissions, insufficient auditing and poor operational discipline. This book keeps those enduring security questions and modernizes the answers.
This book uses the supplied historical security material as a curriculum and risk-thinking source, then rewrites the chapters around current Exchange Server and Microsoft 365 practice.
Chapters
Messaging Security Threat Model Deep Core
Comprehensive guide to email threat modeling across identity, transport, content, mailbox, endpoint and administrative layers.
Read chapterOutlook on the Web and Remote Access Security Deep Core
Deep guide to Outlook on the web exposure, HTTPS, authentication, certificates, publishing and remote-access security.
Read chapterMailbox Delegation, Privacy and Administrative Access Deep Core
Deep guide to Full Access, Send As, Send on Behalf, mailbox delegation, privacy, approval and auditing.
Read chapterModern Authentication and Legacy Mail Protocols Deep Core
Deep guide to Basic authentication removal, OAuth-based modern authentication, POP/IMAP/SMTP AUTH and legacy application migration.
Read chapterExchange Hardening, Patching and Service Exposure Deep Core
Deep operational guide to Exchange hardening, patching, Internet exposure, unnecessary services and secure change control.
Read chapterMalware, Phishing and Content Security Deep Core
Deep guide to modern email malware, phishing, malicious links, attachments and layered Microsoft 365 protection.
Read chapterMessaging Logging, Auditing and Forensics Deep Core
Deep guide to Exchange/OWA/SMTP logging, mailbox audit evidence, message tracing and incident timelines.
Read chapterTLS, Certificates and S/MIME Deep Core
Deep guide to transport TLS, HTTPS certificates, certificate identity and S/MIME message signing/encryption.
Read chapterMail Firewalls, Network Boundaries and Edge Design Deep Core
Deep guide to Exchange network boundaries, SMTP and HTTPS exposure, firewall policy, edge services and DMZ design principles.
Read chapter