| Re: eMails on iPhone - push function [message #144191 is a reply to message #144175] |
Fri, 12 October 2018 14:34   |
Maerad
Messages: 275
Registered: August 2013
|
|
|
|
Just a quick oversight.
There is some kind of "Push" for IMAP, but it's far from supported or rightfully implented, even by the clients. If you have many mobile devices, get the active sync license and save yourself some work. Active Sync is optimized for mobile communication with encryption and compression. Also it works over port 443 and SSL, so it shouldn't be blocked anywhere. With ActiveSync and Push, you shouldn't have more then 2-3% differnce in battery use, at worst.
Active Sync keeps open a TCP connection and the server sends an information, if a new mail is received.
IMAP has something similar BUT in some WLAN IMAP is blocked and it's not as good as Active Sync. Uses more power and traffic.
Btw. IMAP Idle is NOT Push!
The other important part for AC is, that you can select special functions with active sync, like enforcing a lock with pin, wipe after 8x wrong password, what hardware is blocked to use, wipe the smartphone as admin etc.
|
|
|
|
| Re: eMails on iPhone - push function [message #144193 is a reply to message #144191] |
Fri, 12 October 2018 14:47 |
PavelBruj
Messages: 36
Registered: January 2017
|
|
|
|
Thanks for the post.
I absolutely agree with you BUT this is not simple in case of we are using iPhones in our company.
On the iPhones, there is an issue: If the mail app is in the background for a certain amount of time, or not started at all, it will not receive push notifications.
With ActiveSync you have the problem that the permanent keep-alive connection does not work anymore if the Mail app is in the background for a certain amount of time.
That is why we switched from AS to IMAP and till Friday last week works well - means PUSH notifications. That is why I am trying to find the reason to stop working.
|
|
|
|
| Re: eMails on iPhone - push function [message #144197 is a reply to message #144193] |
Fri, 12 October 2018 15:27 |
Maerad
Messages: 275
Registered: August 2013
|
|
|
|
PavelBruj wrote on Fri, 12 October 2018 14:47Thanks for the post.
I absolutely agree with you BUT this is not simple in case of we are using iPhones in our company.
On the iPhones, there is an issue: If the mail app is in the background for a certain amount of time, or not started at all, it will not receive push notifications.
With ActiveSync you have the problem that the permanent keep-alive connection does not work anymore if the Mail app is in the background for a certain amount of time.
That is why we switched from AS to IMAP and till Friday last week works well - means PUSH notifications. That is why I am trying to find the reason to stop working.
We also use iPhones and Tablets - AC works fine without problems, no matter if the app is active or not. It's bound to the system behind. Maybe it could be different with another mail app, I would check the settings there or power profiles in iOS that kill the mail service. We use the standard app and connection to kerio with AC.
For IMAP - this has to be a local problem with you I suspect OR with the phones themself. Was there an update to kerio or the phones before the problems occured? Change in the firewall, so the connection gets cut after some time?
IMAP Idle/Push works the same as AC in this case .- keeps the connection open, sends a heatbeat and gets a notify if something happened.
Kerio (company) has no way to disable that from outside. Sure, some things are bound to licenes, but they can't remote in and turn it off. So something has happened at your side that kills the connection.
|
|
|
|
| Re: eMails on iPhone - push function [message #144198 is a reply to message #144197] |
Fri, 12 October 2018 15:38 |
PavelBruj
Messages: 36
Registered: January 2017
|
|
|
|
Yep, agree. And thanks for the discussion. We also use native email application on iPhones. Trust me, I was trying almost all settings, but if you will be so kind and send some pictures of your setting, I would highly appreciate.
What is strange is that as well others have the same problem in the exact same day and time. For example @alainrussell and some others. <_at_>alainrussell: which oprator are you using. We are using Vodafone in Czech Republic.
Thanks
|
|
|
|
|
|
| Re: eMails on iPhone - push function [message #144216 is a reply to message #144198] |
Mon, 15 October 2018 12:20 |
Maerad
Messages: 275
Registered: August 2013
|
|
|
|
PavelBruj wrote on Fri, 12 October 2018 15:38Yep, agree. And thanks for the discussion. We also use native email application on iPhones. Trust me, I was trying almost all settings, but if you will be so kind and send some pictures of your setting, I would highly appreciate.
What is strange is that as well others have the same problem in the exact same day and time. For example <_at_>alainrussell and some others. <_at_>alainrussell: which oprator are you using. We are using Vodafone in Czech Republic.
Thanks
Looks like I was wrong in this case - I studied a bit the software itself. It seems that Apple has his own integration of push per IMAP and it seems Kerio runs a similar service itself. If that service is offline, you won't receive PUSH with apple devices.
Something new to learn every day. Btw. we only use ActiveSync right now - do you want the setup from that? Nothing special about it, config the connection with the apple device as exchange server, that's it. No special options.
|
|
|
|
|
|
| Re: eMails on iPhone - push function [message #144242 is a reply to message #144241] |
Wed, 17 October 2018 12:24 |
Maerad
Messages: 275
Registered: August 2013
|
|
|
|
PavelBruj wrote on Wed, 17 October 2018 12:03Many thanks for the update. Much appreciate..
Are you using some special certificate or? I am interesting as well for exchange setup, thanks.
I am still in touch with GFI technical support..
Exchange Active Sync setup is quite easy. The only problem might be, that you need a current maintaince plan with Kerio including the Active Sync license and maybe a real SSL certificate. AFAIK if AC is licensed, it works automagically, just be sure whoever needs it is added in a group with an access policy for AC.
For ther certificate I use let's encrypt. If you use linux or mac as a server, there's a great topic about that in this forum (on the first page). If you need it for windows, I could write a short guide. It's basically disabling port 80 in Kerio, installing IIS on port 80, add a rewrite in IIS for letsencrypt check on port 80, everything else goes to port 443 kerio.
The letsencrypt client auths the domain and saves the certificate. Then I created a self made cert in kerio. After that a new task that starts the letsencrypt program for to renew the cert every day and after that copies the cert files from the appdata folder to the kerio folder and overwirtes the server.key/server.cert (or whatever the data is) on this directory. It's quite easy and straighforward 
|
|
|
|
|
|
| Re: eMails on iPhone - push function [message #144244 is a reply to message #144243] |
Wed, 17 October 2018 15:01 |
Maerad
Messages: 275
Registered: August 2013
|
|
|
|
PavelBruj wrote on Wed, 17 October 2018 12:44Uff, so many technical informations 
We have valid ActiveSync license. What should be the problem is the certtificate itself. Could you please send me the screenshot from your iPhone to see how certificate should looks like? I am almost sure we have no self made ceritificate at all  Is there any chance how to create this certificate?
Thanks in advance
Btw: "If you need it for windows, I could write a short guide." - this would be great..
I'll do a guide later on, will take some time. I suspect you are no techie then?
For my guide you will need direct access to/on the kerio server (I suspect you use Windows).
And some basic info about certificates
In the kerio admin there's an option "SSL Certificates". There you can generate a new, personal cert, if there is none. Usually kerio creates his own when installed and updates it if needed. You use those certs to encrypt the connection between the server and the client. If you open website with a secured connection (SSL and cert), you see the https:// in front of it and the browser also tells you the connection is secure.
With kerios self-made cert, the connection is encrypted BUT this is your own cert, so the client can't ask a legit cert provider, if this cert is legit and really from you.
So you need a cert from an official source the client can ask. You can buy those from registrys OR create a free one with "Let's Encrypt" (what my guide will be about).
Just an example - with an android phone you can connect the active sync, because they have an option "Accept all certificates, even private". Apple AFAIK removed that option and wants a legit cert.
If you wanna try add a new account with he apple device, select connection to echange/active sync, enter your password/username and if needed the correct server address. if everything is right, you should get a msg like "cant trust certificate". Maybe there's also an ignore option - I don't have a apple smartphone inhouse right now.
|
|
|
|
| Re: eMails on iPhone - push function [message #144245 is a reply to message #144244] |
Wed, 17 October 2018 15:21 |
PavelBruj
Messages: 36
Registered: January 2017
|
|
|
|
I am the fan of this, but I am still learning. What is not so good is that I am not the one who is operationg our Kerio server BUT I am in contact with this person so I will translate this to him..
You are right that once I want to create Exchange account I am doing exactly what you described. As well I am getting the message "cant trust certificate".
I am just testing Exhange connection on my iPhone and is strange. He is able to make PUSH for example 1 hour, than 1 email is not delivered at all and the rest of the emails are than delivered as a PUSH. As well I have a installed tha same account on Android phone and working perfectly.
So from this finding, there would be something wrong with the certificate?
Thanks
|
|
|
|
|
|
|
|
| Re: eMails on iPhone - push function [message #144279 is a reply to message #144278] |
Mon, 22 October 2018 10:33 |
PavelBruj
Messages: 36
Registered: January 2017
|
|
|
|
Active Sync works but only sporadically. Sometimes the email does not come for several tens of minutes which is horrible.
Based on the info from GFI portal, they escalate this issue to some SaaSOps team and now they are awaiting update.
Will keep you updated about this. I will keep them pushing to get this resolved.
|
|
|
|
|
|
Members
Search
Help
Register
Login
Home
