awayWEB...
Pretty

Frequently Asked Questions about the awayWEB system

How can I access Exchange through awayWEB?

Microsoft Exchange can be accessed via the Microsoft 'Outlook Web Access' product, which can be installed on the Exchange server or on a separate web server.

AwayWEB provides strong security and confidentiality for users accessing the OWA server, protecting your confidential corporate email.

Will awayWEB/WAP let me access my intranet through my mobile phone?

awayWEB supports secured access through WAP to your intranet, but neither WAP or awayWEB will turn your intranet applications from 'HTML' (used by standard web browsers) into 'WML' (the standard required by WAP browsers).

WAP applications are generally specially written for WAP phones - newer applications with WAP features are often designed to automatically switch into the correct mode, but otherwise, special WAP applications are required.

With awayWEB, the applications can be installed on an intranet, but be securely accessed through public WAP gateways

Can I just use passwords instead of tokens?

Technically, it's perfectly possible to use static passwords - even most token server products provide this as an option, but we wouldn't recommend it for most awayWEB users.

The token provides protection against a whole range of security issues:

  • Virus and Trojan software installed on users PC's stealing passwords entered at the keyboard
  • Users accidentally or deliberatley revealing passwords to others (friends, family, colleagues)
  • 'Repudiation' - users trying to avoid responsibility for actions
  • Poorly chosen user passwords, leading to trial-and-error password guessing attacks

If you think tokens may be too complex or too expensive for your requirements, you should talk to us about a managed service, where we can provide tokens and arrange the administration for you.

A good token system is actually very easy to use, and can actually reduce administration overheads - users have fewer passwords to remember, and there are fewer account lockouts and help desk calls required for authentication problems

What awayWEB isn't

The awayWEB system is not any of these things:

  • A document management system
  • A security database administration system
  • A security token server
  • A directory server
  • A web site administration system
  • A web application programming language or system

However, many of these functions could be performed by web based servers and products, which can be securely accessed through the awayWEB system.