Howto:Microsoft Office 365 Recommended Product Testreport: Difference between revisions

From innovaphone wiki
Jump to navigation Jump to search
Line 127: Line 127:


<!--  
<!--  
If you are OK with this points, then you can follow the instructions bellow.
If you are OK with this points, then you can follow the instructions below. With this configuration faxserver can receive mails from Outlook 365 (Exchange Online) but it is still unsafe as any Office 365 User can send to the innovaphone Faxserver. Internally we check if the sender address is a valid mail address and has a fax licence. Otherwise we reject the mail.


In order to use the innovaphone fax server with Office 365, it requires a few adjustments on both sides.
In order to use the innovaphone fax server with Office 365, it requires a few adjustments on both sides.
Line 206: Line 206:


===Office 365 Connector===
===Office 365 Connector===
On the Office 365 Online page we need a connector to forward our fax domain to the Linux AP. The Linux AP must be reachable from the internet.
On the Office 365 Online page we need a connector to forward our fax domain to the Linux AP. The Linux AP must be reachable from the internet. For this we need a port forwarding (TCP 25) from internet to faxserver.
To do this, a new connector must be created in the Exchange Admin Center under Message Flow Connectors (+).
To do this, a new connector must be created in the Exchange Admin Center under Message Flow Connectors (+).


Line 227: Line 227:
[[Image:connector_4_TLS_eng.png]]
[[Image:connector_4_TLS_eng.png]]


A valid destination mail address is required to check the connector.
A valid destination mail address is required to check the connector. (!Erklärung!)


[[Image:connector_5_targetaddress_eng.png]]
[[Image:connector_5_targetaddress_eng.png]]
Line 236: Line 236:


===Log File===
===Log File===
In the log we can see if the mails arrive and sent successfully.<br>
In the log we can see if the mails are received and sent successfully.<br>
With Putty on the Linux AP:<br>
With Putty on the Linux AP:<br>
<code>tail -n0 -F /var/log/mail.log</code><br>
<code>tail -n0 -F /var/log/mail.log</code><br>
Line 242: Line 242:
Diagnostics - Logs - Mail - View
Diagnostics - Logs - Mail - View


The log must then contain "Trusted TLS connection established from" at the connection.
The log must then contain <code>"Trusted TLS connection established"</code> at the connection.<br>
 
For incoming mails:
  Trusted TLS connection established from host.outbound.protection.outlook.com [213.199.154.0]: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)
  Trusted TLS connection established from host.outbound.protection.outlook.com [213.199.154.0]: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)
For outgoing mails:
Trusted TLS connection established to ucclab-info.mail.protection.outlook.com[213.199.154.42]:25: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)




<!--
===Installation & Configuration of the vendor Software===
===Installation & Configuration of the vendor Software===



Revision as of 18:12, 4 April 2018

General Information

  • Product name: Office 365
  • Vendor: Microsoft
  • innovaphone Firmware: v10 sr11

The objective of this article it's to test the Office 365 Solution together with Innovaphone Applications like innovaphone Exchange Calender Connector, innovaphone FaxServer and myPBX Office Integration.

How to configure this applications together with Office 365 and if there is any limitations.

Current test state

Testing of this product has been finalized.

Configured Scenario

Important Components and Requirements

  • Office 365 Small Business Premium Plan.
  • Office 365 System Requirements can be found -> Here
  • innovaphone myPBX Launcher
  • innovaphone PBX v10
  • innovaphone Exchange Connector Application

myPBX Office Integration

Installation & Configuration of the vendor Software

In order to have myPBX Office Integration it's required to install the Office Applications.

The Office Applications are only available for some specific Office 365 Subscription Plans you could find a comparison table for the business plans here.

To install the office applications the user just login into the portal.office.com and click on the shortcut Download Software and be able to download the full package. Microsoft Install Office Guide.


Installation & Configuration of the innovaphone components

First install the myPBX launcher at the Windows PC and define the myPBX UC Client as Office Presence Provider like explained at Concept myPBX Office2010 Integration.

The system Name of the PBX should be equal to the office 365 Domain Name and also we should enable the flag "Use as Domain".

Office365 Howto Setup 1.png

The "Name" field at the PBX User Object should match also with the Office 365 User so the Email address can be identical.

Example: Office 365 User with email rba@innovaphoneAG.onmicrosoft.com should match with User Object with name field equal to "rba".


Test Results

Tested feature Result
Presence Updates at Microsoft Desktop App Contact Info. OK
Instant Messaging started from Desktop Microsoft App. OK
Start calls from Microsoft Desktop App. OK
Presence Updates at Microsoft Web App Contact Info. NOK


innovaphone Exchange Calender Connector

Installation & Configuration of the vendor Software

In order to be able Exchange Calender Connector connect to the Exchange Online EWS we need first to find what is the Exchange Online Server Address. The URL of Exchange Online Web Service is a URL like "https://" + "Server name" + "/EWS/Exchange.amsx", for example, "https://pod51024.outlook.com/ews/exchange.amsx" where the value that should be used for Server field at Exchange Connector is pod51024.outlook.com.

How to find the Exchange Server address you could find some indications Office365 Community Answers.

Also similar to what it's done with Local Exchange Installations it's required that each User change their permissions for vieweing Free/Busy Information at Outlook Calender Options.

With Office365 we could only find this option using the Outlook Desktop App and not the Outlook Web App, description how to find this option could be find at Concept Exchange Calender Connector Article


Note: Microsoft have alternative method to connect to EWS to a single/fixed domain (to simplify the process). The new fixed address is : outlook.office365.com this can be configured as Server on the Exchange Calender Connector Application as long the DNS it's correctly working.

Installation & Configuration of the innovaphone components

NTML Authentication it's not supported by Office 365 Exchange Online Server, so it's necessary to use basic Authentication method to connect to Exchange Online EWS.

This feature was introduced with innovaphone Exchange Connector v10sr11 like described here.

The Exchange Calender Connector configuration it's similar to any other, we need to use the Server Address we found previous for the Exchange Online Server and additional we need to set Linux NAT IP/Port so Office 365 Exchange Online can reach the Exchange Calender Connector Application from the Internet through NAT Port Forwarding.

Office365 Howto Setup 2.png

Test Results

In this case they are not many different tests to perform. The innovaphone Exchange Connector Application connects successfully to the Exchange Online Server and retrieves the calender entries from it and updates the Presence at Innovaphone PBX.

Office365 Howto Setup 3.png


innovaphone FaxServer

Use of Innovaphone FaxServer with Office 365 Exchange Online is possible however it is unsafe as Faxes can be sent by attackers on the customers expense (just by faking a proper From: address and sending from a Office 365 Cloud service).


Office 365 Lync Online

  • Integration with the Office 365 Lync Online and Innovaphone PBX was not tested.
  • The Lync Online solution only allow SIP Trunking with selected VoIP Carriers by Microsoft for PSTN connectivity and don't have any option to setup an own PSTN Gateway.
  • Lync Online allows Federation with Skype and Lync 2013 Server on premises as explained at technet page through Edge Server. There is no current implementation of SIP Federation between Innovaphone PBX and Edge Server from Microsoft Lync.

Known Issues

Summary