Securing The Post Office With Ssl Connections To The Poa - Novell GROUPWISE 8 - ADMINISTRATION Administration Manual

addresses and a second POA to always redirect users to proxy IP addresses. Users are then
redirected based on which POA IP address they provide in the GroupWise Startup dialog box when
they start the GroupWise client to access their mailboxes.
1 Configure the initial POA for the post office with the IP address that you want for internal
users. For instructions, see
page 498.
Do not fill in the Proxy External IP Address field on the Network Address page of the POA
object.
2 Create a second POA object in the post office and give it a unique name, such as POA_PRX.
For instructions, see
3 Configure this second POA with an external IP address. For instructions, see
"Securing Client/Server Access through an External Proxy Server," on page
Do not fill in the TCP/IP Address field on the Network Address page of the POA object.
4 Create a startup file for the new instance of the POA.
4a Use the
/name
4b Use the /ip switch to specify the IP address of the server where this instance of the POA
runs.
4c Use the /port switch to specify the client/server port that this instance of the POA listens
on.
This information needs to be specified in the POA startup file because this information is
not specified in ConsoleOne for this instance of the POA.
5 Start the new instance of the POA.
6 Give users that you want to be redirected to internal IP addresses the IP address you used in
Step 1.
7 Give users that you want to be redirected to proxy IP addresses the IP address you used in
Step 3.
36.3.3 Securing the Post Office with SSL Connections to the
POA
Secure Sockets Layer (SSL) ensures secure communication between the POA and other programs
by encrypting the complete communication flow between the programs. By default, the POA is
enabled to use SSL connections, but SSL connections are not required.
For background information about SSL and how to set it up on your system, see
"Server Certificates and SSL Encryption," on page
To configure the POA to require SSL:
1 In ConsoleOne, browse to and right-click the POA object, then click Properties.
2 Click GroupWise > Network Address to display the Network Address page.
Section 36.2.1, "Using Client/Server Access to the Post Office," on
Section 36.1.1, "Creating a POA Object in eDirectory," on page
switch to specify the name of the POA object that you created in
1161.
488.
Section 36.3.1,
509.
Step 2.
Section 75.2,
Configuring the POA 511