2

i use Android 2.3.6 stock. I am new to Android.

At work we have a MS Small Business server, it has Exchange for e-mail. With my laptop (Thunderbird), i can only connect to IMAP if i have a VPN connection to work. But my android phone can get my email without a VPN connection. But that is not allowed in our firewall! How can it be? Now the VPN has the same credentials as the email itself. This is probably the way it always works on MS small business server.

I am guessing that Android is so smart that it tries to make VPN connection with the given email credentials when the connection fails initially.

Is that so?

Improve this question
0

1 Answer 1

Reset to default
1

Android doesn't do that (nor do iOS and others).

IMHO it's not smart to automatically try to do such a thing. It's just a coincidence that your credentials are the same for both those very different things.

Exchange credentials and VPN credentials should really be not the same to begin with (for obvious security reasons).

Improve this answer
3
  • Surely with Active Directory and a primarily Windows Server based network this (the credentials being "identical") isn't unlikely at all?
    – Jeeva
    Sep 12, 2012 at 10:32
  • Maybe, right. I find this a bigger security concern than having 2 separate credentials for both. I'm used to PKI based VPNs personally and my company doesn't do it either to be able to lock out individual devices independently from changing the LDAP credentials. There's still left the endpoint which you cannot derive from Exchange settings, right? after all the exchange server in the OP's case is not publicly available, cause the VPN is needed to connect to it internally.
    – ce4
    Sep 12, 2012 at 11:37
  • For the record, I totally agree that this [auto-magically connecting via VPN] is not something Android does.
    – Jeeva
    Sep 12, 2012 at 11:50

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .