Contents

Title and Copyright Information

Preface

• Audience
• Related Documents
• Documentation Accessibility

1 Mobile Synchronization Gateway Security Overview

• Basic Security Considerations
• Understanding the Mobile Synchronization Gateway Environment
• Overview of Mobile Synchronization Gateway Security
• Recommended Deployment Topologies
• Operating System Security
  • Firewall Port Configuration
• Secure Communications
• LDAP Security

2 Performing a Secure Mobile Synchronization Gateway Installation

• Installing Infrastructure Components Securely
• Credentials Needed to Install Mobile Synchronization Gateway Components
• Post-Installation Configuration

3 Implementing Mobile Synchronization Gateway Security

• About System Security in Mobile Synchronization Gateway
• Configuring HTTPS on Front-End GlassFish Server Hosts
  • Installing an Official Certificate
  • Setting SSL Default Port to 443
• Disabling SSLv3 on Front-End GlassFish Server Hosts
• Disabling HTTP on Front-End GlassFish Server Hosts
• Enabling LDAP SSL in Mobile Synchronization Gateway
• Enabling Secure Mail
• Enabling Secure Calendar
• Enabling Secure Contacts Server
• Enabling Secure Personal Address Book
• Configuring and Using Authentication
• Configuring and Using Access Control
• Making Mobile Synchronization Gateway and GlassFish Server Secure
  • Preventing Denial of Service Attacks on GlassFish Server
  • Configuring JMX Port for GlassFish Server to Use SSL
• Detecting Possible Security Issues

A Secure Deployment Checklist

• Secure Deployment Checklist