GFI Software Aurea SMB Solutions


Today's Messages (off)  | Unanswered Messages (on)

Forum: Kerio Connect
 Topic: EwsOperation.cpp: EWS request FindItem: error occurred; code 339, description: Unsupported restricti
EwsOperation.cpp: EWS request FindItem: error occurred; code 339, description: Unsupported restricti [message #148414] Fri, 10 July 2020 20:03
Wilco is currently offline  Wilco
Messages: 87
Registered: July 2005
Location: The Netherlands
"EwsOperation.cpp: EWS request FindItem: error occurred; code 339, description: Unsupported restriction type...."

I was using eM Client 8.0.2.
What is it and can I prevent this?

Wilco


Kerio Connect 9.2.12 on Windows Server 2012 R2 (Dutch)
 Topic: Outlook sort order of folders with KOFF
help-browser.png  Outlook sort order of folders with KOFF [message #148410] Fri, 10 July 2020 08:20
Piff14 is currently offline  Piff14
Messages: 54
Registered: July 2008
Location: Vienna
In the folders panel, Outlook shows the "special" folders like Inbox, Outbox, Drafts, Sent as well as any custom folders that users have created at top level of their mailbox.

One can arrange the folders, or (using the Show All Folders A to Z feature) sort them alphabetically.

My client wants to see the special folders like Inbox on top, and the custom folders below. They have tried various things to get this order, but it keeps reverting to an arrangement with Inbox somewhere near the bottom. The account is used by multiple people in the office.

- Does KOFF store the order of folders on the server? Could it be that one user is continuously overwriting this setting for all others?
- Or does KOFF just not support changing the order and keeps reverting it to some default?

Ideas?

[Updated on: Fri, 10 July 2020 10:19]

Report message to a moderator

Forum: Kerio Control
 Topic: Scheduled Certificate renewal from external CA
Scheduled Certificate renewal from external CA [message #148399] Wed, 08 July 2020 08:33
ascheck is currently offline  ascheck
Messages: 1
Registered: December 2015
Location: Nalchik
Browsers won't support long certificate validity periods soon. It's makes sense to automate certificates request and renew. And It's obviously makes sense to get certificates from external trusted CA such a Let's Encrypt. Automatically.
Now it's possible only via GUI. First you are changing reverse proxy settings to pass http requests to internal host where certbot or another ACME-client istalled. Then you are generating certificates. Then you are importing certificates to Kerio Control. Then you are changing reverse proxy settings for using new certificate. And all of this repeats every 3 months. It's not pretty convenient.
I wish to automate certificates renewal on my Kerio Control host. And I wish it to be possible request trusted certificates by ACME protocol directly from Kerio Control.
Forum: GFI LanGuard Feedback
 Topic: TLS 1.2 support and cipher suite configuration
TLS 1.2 support and cipher suite configuration [message #148393] Mon, 06 July 2020 19:03
havx is currently offline  havx
Messages: 1
Registered: July 2020
Please add support for and the option to configure the LanGuard server and agents to use TLS 1.2 for communication as well as the ability to configure which cipher suites are accepted.

You could add advanced configuration settings to the application GUI. Or another suggested way to go about this could be simply adding an "Include product/product-ssl.conf" to the "..\GFI\LanGuard 12\HttpdConfig\product.conf" file and in the new editable "product-ssl.conf" file the user can enable/disable SSL protocols and set the accepted cipher suites. This file could be just five lines (example below with my desired settings):
SSLCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES:!DSS:!DH
SSLProxyCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES:!DSS:!DH
SSLHonorCipherOrder on
SSLProtocol TLSv1.2
SSLProxyProtocol TLSv1.2

This absolutely cannot require FIPS mode to be enabled or used in Windows. FIPS mode is unnecessary and is an archaic group policy that actually makes the Windows system less secure. There are a plethora of resources online that detail how to edit the Windows registry to configure which protocols and cipher suites are enabled/disabled for Schannel; which is what FIPS mode will edit but FIPS mode makes bad and old choices for protocols, ciphers, and more. The IIS Crypto tool from nartac is also a great resource to do this the right the way. Regardless, httpd used by LanGuard still needs to be configurable as well.



Current Time: Sat Jul 11 00:39:15 CEST 2020

Total time taken to generate the page: 0.03430 seconds