Slashdot Mirror
Can OWA Replace the Outlook Client and the VPN?
IPAQ2000 writes "This past week, I attended a
panel discussion sponsored by Microsoft and
other major players in the space. One of the ideas brought up by one of the expert panel attendees from a company called
Seaside Software claimed that large organizations should rely mainly on Outlook Web Access (OWA) for Exchange 2K access for remote users. He claimed that OWA access with SSL makes it perfect for secure access and saves the hassle of the VPN client support. I can see how avoiding the VPN client and the Outlook client together on desktops around large organizations (like mine) could be a good thing (by saving money), and how moving to OWA for remote users makes sense. In fact, it looks like
MS themselves are putting much more emphasis on the browser in Exchange 2003 (OWA
and Outlook are almost identical) so that users can run whatever version is appropriate for their needs, according to connectivity speeds, location, etc. There was a discussion regarding mobility and remote solutions in the enterprise. I thought that this might be a good subject for a
Slashdot discussion, especially as it relates to Exchange. What do you think about OWA as main way of accessing Exchange, especially as OWA keeps getting richer with each version of Exchange?"
I just used this today at work (we have the latest version of exchange) and it's really a pain compared to outlook. I'm sure as they add features and functionality it'll be nicer (and it's sure nicer from a management standpoint), but I'm still not thrilled with the interface. Currently we have everyone in the office running normal outlook with a few people (including us IT staff) trying out the web version of exchange when needed.
Considering that a native OS X Outlook client is the one major app that makes it annoying to use a Mac on a Windows network, improvements in OWA are very welcome.
Up to this point, OWA hasn't been an acceptable subsitute for me, but I would like it to be. It's lightweight (esp. compared to Outlook), cross platform and definitely better in X2K than it was in X5.5.
I wonder what MS will have as the additional features you get in 'real' Outlook as OWA gets better. I have heard they're considering a native OS X Outlook client, but I'm not holding my breath.
This would be great for cross platform users. One of the reasons people like the mac is that you can use Office on a unix workstation, but without Outlook, it's still slightly kludgy.
Back to e-mail, all I want is the ability to forward my mail to an address of my choosing (at least so I can do better filtering and sorting with Procmail). If I have that (which I do), I couldn't care less what e-mail servers they run.
I want all my mail in one place (in my mail spool on my home mail server) so I can check all my mail just by hitting Tab. I don't want to have to log in to some lame web client several times a day just to read mail.
If you reply, do so only to what I explicitly wrote. If I didn't write it, don't assume or infer it.
While this seems a feasable idea for people who use VPNs just for outlook, sometimes you need a VPN connection because you need a "workplace" IP. Many organizations have websites, fileshares, etc. which are only available if you are trying to access them from an IP address that is on the local network.
Also AFAIK OWA doesn't let you do things like set up filtering rules, personal folders, and other things that the Outlook client allows you to do.
-----BEGIN GEEK CODE BLOCK----- Version: 3.12 GIT d? s: a-- C++++ UL++++ P++ L+++ E- W++ N o-- K- w--- O- M+ V PS+ P
Since for a lot of companies the big dealbreaker for switching to Linux desktops is Outlook/Exchange and its calendaring capabilities, is this a way to avoid that? Can you have an exchange server setup but have everyone in the company use the web client on Linux so outlook itself is not necessary?
I use OWA every day at UT Arlington, it works flawless for me on 98, 2000, XP and OS X. This is, of course, when I'm not at my personal computer downloading emails to mail.app. For some blasted reason you can only send email through the university servers when you're physically connected to the univ network via STMP or whatever. I can't use mail.app to send email from my offcampus apartment. fuck. so i have to log in and turn off pop up window protection in chimera/navigator/camino to send mail via the web interface.
i hate having to delete all my sent/recieved email with attachements. could they make deleting email any less intutitve?
all in all it works for me and the rest of campus of 22-23 thousand people + faculty. what was the question again?
moox. for a new generation.
But I won't and I won't burn the karma.
I guess I am just one of the luckier ones. We have several thousand users streched all over the globe and we don't touch Outlook or Exchange. We never will.
But since there still isn't an enterprise open source offering that compares. We are Novell Groupwise, all the way. And guess what? We have never had a attachment virus, ever.
Okay, drunkin troll read head... Fook Exchange!
1;
Can OWA Replace the Outlook Client and the VPN?
No.
Next please!
Yeah, maybe, as far as email goes. But you'll still need VPN to access the file server, where the resources/research/collabrative documents live. Maybe you could do that through an https login, which has a familiar interface and is compatible with nearly everything that can use a web browser. But then the docs themselves wouldn't be secure, right? So forget it.
--
$tar -xvf
For those who use Microsoft Outlook Web Access - do yourself a huge favor and run something other than IE before declaring it sucks. Hitting the server with mozilla will give you a smaller feature set, but it is very usable on low bandwidth connections. Since I go through machines like candy, I've always left my mail on the server. Several thousand messages later... and IE takes forever before it caches everything. Whenever I need to search or move folders around I'll switch to IE, but for the day in day out stuff use something else. Heck, webmail makes even Netscape 4 look good.
+++ UGUCAUCGUAUUUCU
At work I have 3 PST files, and they're about 3GB total. I NEED my PST. I need my archive. I have everything pretty much anybody has ever said to me and anything I've ever replied with in that PST. With OWA I'm dead in the water.
Ofcourse MS is pushing OWA over SSL. MS does not have a good VPN product.
I have used both Outlook and OWA. I did not like OWA. I found that OWA was slow. Meeting reminders did not work. Autosave was tempremental. I lost a few emails when OWA lost its connection to the server (the fault of my ISP). In short useing real Outlook was better.
There are also security risks with OWA. Unless you outfit every user's browser with a SSL cert then a user can use any web browser to read their email. Before you know it you have your users checking their coporate email from Internet cafes and other insecure places. Furthure an attacker would like nothing better to do then start guessing at passwords and reading coporate email.
If you are going to manage SSL certs you might as well go whole hog and run a VPN. A VPN provides both security and an additional ammount of control to system administrators.
As others have written accessing the intranet is more then just access to email. VPNs also allow users to access file servers, and company internal webservers.
VPNs work and provide your users with more then just email. OWA over SSL is a hack.
With the prevalence of PDAs, and phones with PDA functions, it's getting ever harder to break the Outlook stranglehold - my phone syncs with my Outlook contacts/calendar/todo, and that's VERY important functionality. I'd love to use another PIM, but until the syncing software is available, I, and many other business users aren't likely to make the transition.
OWA won't replace much of anything for me, since I keep my Calendar and e-mail on my PDA and sync it (via Evolution). If anyone can manage to do that through the web, then I'm impressed (and I want links so I can do it myself).
I am, and always will be, an idiot. Karma: Coma (mostly effected by
I hate Kapor's project kills Outlook dead.
I have access to both outlook via vpn and OWA. For the normal user, OWA is fine. But if you have custom views, OWA is not an option. My task list is grouped by a numeric priority and by project. You can't do this with OWA. Maybe owa.net will have the functionality. Ever notice that nets are use to capture things? I think .NET is Microsoft being honest.
maybe. but not for a couple of versions yet. I sometimes use OWA but it lacks many features and usablility is a little off. So maybe in a version or 2.
After having to deal with OWA for two weeks being off site, I have to say that hyping that system is a losing battle. In the course of two weeks, I easily lost 6 hours of productivity. I also spent an hour with the IT people trying to figure out a way around the firewall that let me just use Outlook and the VPN client.
The objectives are productivity first, while maintaining security. People need to remember this first!
That said, the concept of web access for remote resources is a good idea. You just can't loose ANY of the functionality that you rely on for the normal product. Just for starters, we have spell check, signatures, reminders, and accurate rendering of attachments (no more "This file type is not yet supported" HTML files when you save an attachment!!!). If you really want to get fancy, you need to have a means for offline access too!
Until the product lets you at least do as much as Pine 1.0, give me a hole in the firewall!
link here
if you use windows 2003 server, AND you use exchange 2003 server, AND you use outlook 11 you can connect to exchange directly w/outlook via ssl w/o a vpn. this is good enough for many people.
they've changed the exchange/outlook pair to be much more remote-friendly and less bandwidth intensive.
link here
But what if it WAS on the server? What if you DID have that 3GB of archived mail on the server? Would OWA be okay for you then?
And what's keeping you from putting it on the server? Your mailadmins setting quotas? Concerned about privacy? Performance?
OWA is actually quite nice IMHO, especially if you are using IE under Windows. In my experience, it works reasonably well with Netscape/Mozilla, as well as Apple's KTHML-based Safari. However, before you switch to an all-webmail system, you ought to consider the following:
* Offline Access: If your organization, like ours, has a lot of travelling users, they will not be able to catch up on email while they are, for example, catching a flight. This can be mitigated with Mobile Information Server. (ActiveSync your PDA over the 'net before you get on the plane.)
* Convenience: Checking email over the web is generally considered not as easy as checking it w/ a dedicated client. That's why many folks, like Yahoo!, no longer offer free POP3 services unless you pay up--because many people are willing to spend money for the convenience. Further, many users navigate to sites by typing in the URL in the "Start | Run" dialog box, which will cause them to inadverdently navigate out of their OWA client and thus stop new mail notification.
* Security: Since you mentioned SSL... Many firewalls, for obvious reasons, cannot inspect traffic encapsulated in a SSL tunnel. So any application-level protocol protection provided by the firewall will be rendered useless. Example of this would be the Cisco PIX 515's "fixup" commands.
* More security: Having OWA generally means that users can access your email system with non-company issued systems. You can secure your servers all day long, but a simple key logger on a non-company system can bring you down to your knees. Especially since many Windows shop does unified login user/pass w/ Active Directory.
That said though, I use OWA to check work email every night on my Mac when I make it home. It works fine. When implemented properly it's a great compliment to Outlook, but IMHO it's probably not suitable as a replacement of Outlook
We're a GroupWise shop and have been running WebAccess (same thing - web frontend that replicates 95% of the client's functionality) for a few years. We're not a massive corporate either, but have about 300 users at various sites.
For almost all of the "remote email" use people need, WebAccess does the job nicely. It's generally people just checking email/appointments from home or when they're at client sites - they can just type in a URL, put in username/password and be there. Even the people who use VPN also use WebAccess from time to time because it's often more convenient than getting out the laptop, hooking it up to LAN/modem/mobile and syncing.
We have a few people who work from home most of the time and are perfectly happy with WebAccess. I've not used OWA recently, but WebAccess does almost everything people would need, works properly across different browsers, it's very light so it works acceptably even on 9600bps mobile connections (there's even WAP and Palm VI versions) and handles things like spellchecking and addressbooks via Java apps. People can set up and change rules, change passwords, proxy to other people's accounts, access shared folders. If OWA is at that kind of state now then it should also be fine for most.
We also have some people who need to be running the full client and VPN. People who need to sync then work offline or who have more complicated calendars that are better managed by dragging things about than editing individual appointments.
I wouldn't drop VPN, but a decent web frontend for your groupware stuff can reduce a lot of the need for it, and those who just need a quick and easy check of their mail can do it with far less complexity.
You can use OpenOffice.org with a rootless X server right now. Apple are rumoured to be doing a Carbonised version Real Soon Now(tm), too, and all the time it gets better. KMail is ramping up to be better than Outlook in all respects except the matter of being a virus incubator. Safari AKA Konqueror is now a Carbonised Apple-ication. And so it goes.
Unless each new MS-Office has some amazingly useful new features, assessors won't be asking of OpenOffice.org, `is it good enough to replace MS-Office' but `why shouldn't we replace MS-Office with this faster, portable, safer and more useful office suite'? Especially since it's both Free and free.
There are quite a few webmail apps, but since web and direct connection are quite different environments, it's not really that flash an idea to try to make them indistinguishable.
Got time? Spend some of it coding or testing
While I appreciate your point, and have no great love for Microsoft Office per se (although it is very good on OS X I must admit), the issue I was really trying to address was that of a Microsoft Exchange client. None of your suggestions would really be suitable for people needing to tap into the groupware components of Exchange (shared clendaring, contacts, meeting planning etc). That's one major place where Exchange has traction within organziations and for which we are at the mercy of Microsoft to provide a client. The only non-MS client I know of is a connector for Evolution that you can purchase from Ximian.
I implemented OWA in my on organizationa s a nice bonus and now it has become more or less mission critical. There's almost nowhere you can go these days where you can't get easy access to a web browser; OWA is well worth it even in the old 5.5 version we use. Future upgrades will no doubt improve on things.
But it isn't as powerful in some regards as full Outlook, and in my mind the best way to get full Outlook on Linux etc. is Terminal Server to a real copy. The Linux RDP client is in great shape.
Of course, there are costs associated with this, so an OWA solution is also an important part.
~~~~~ BigLig2? You mean there's another one of me?
You could always rip out your Exchange servers and replace them with Domino on Linux. Your users could then use iNotes to access their mail via the Outlook client, or use the iNotes web mail interface via SSL, or use IMAP or POP3 and SMTP with their choice of mail program. Or even use Notes.
You could also consolidate a bunch of Exchange servers onto one iSeries box, and cut your costs. Domino on iSeries has been shown to deal happily with up to 10,000 simultaneous mail users on one server.
GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
I use OWA with work on a pretty regular basis, but my main problem with using it as a primary means to access email is its lack of offline synchronization. I'm a consultant, and as such I tend to travel a lot, which means I am often without connectivity. I'm sure the same thing goes for travelling sales people, executives, etc.
Internet connectivity is still not ubiquitous, but as long as you've synched your laptop, you at least have your old email, and can compose new emails, queueing them up until you have a chance to synchronize again. Given that email tends to be one of the primary means of communication when working in large, geographically disperse teams, having offline access to old emails can be a lifesaver at times (say, when you're onsite with no Net access and need to make an emergency phone call, but the contact info happens to be in an email somewhere).
Other than that, OWA is usable, but not great.. In my experience, I've had formatting issues, and the occaisional IE crash. Of course, Outlook crashes too, so there's not really much difference there..
- Sean
Of course, as more and more people started using it (and our call volume on it rose!) MS started to concentrate on improving the web client more. The jump from OWA in 5.5 to 2000 is terrific, and I expect that progress to keep getting better. Hell, even between 5.5 service packs OWA improved significantly.
I already have an SSL cert on the OWA server that I work on now, so I'm looking forward to the next incarnation of OWA.
URLscan, properly tweaked for use with OWA, isn't as bad as some have said, but it isn't perfect either. I consider it a necessary evil which is far better than the possible alternative of not using it at all. It might choke on an attachment here or there with an odd character in the name, but overall the negative effect is minimal.
It works OK, but most users really don't like it all that much. It can be slow and there are occasional problems with needing to refresh a web page because it didn't completely render. From my understanding there are frequently scheduled reboots of these OWA enabled servers.
The Outlook Web Client is limited compared to the full Outlook client. Those heavy email users would find it unacceptable for frequent use. It's fine for getting one's email remotely but it's not good enough for constant use.
Since the OWA runs on Microsoft IIS on the NT/2000 platform, you have GOT TO MAKE SURE that it is patched and updated very frequently. I know of smaller outfits who didn't do this and when Code Red and Nimda were rampant they were infected.
In addition to OWA we also use some Citrix abilities for Intranet and other access via a web interface but the encryption is increased for these services using the RSA SecurID fob and high encryption.
We run VPN as well for those work at home or frequent travelers (high speed hotel access). I've got a laptop hooked up right now running VPN using the RSA SecurID system for high encryption. This is preferred! I can access everything exactly as if I was in the office and it's just slightly slower than being on the WAN in a field office. It is completely acceptable. I can access client/server systems, Intranet, Host, etc. All from the comfort of my home.
Yeah VPN and RSA encryption are not cheap but neither is office space. Go ask someone in the know what it costs to maintain an office or cubicle for a single employee. You would be surprised. The ones in the know factor in electricity, floor space, heat, air-conditioning, parking, phone, network, etc. into the equation. Consider all these costs over the cost of VPN, encryption, cell phone, phone line and the power and flexibility of working remotely.
Heck, I pay for my own broadband connection out of my pocket anyway. Putting the work laptop on the home network was a no brainer. I am not looking for work to pay for the broadband connection at all. I just want to be able to utilize VPN to get to the corporate network.
I don't get to work at home but I am on call and I am able to respond to an outage much quicker using broadband and VPN. To dial into the network and then have to run my desktop remotely via pcANYWHERE is much slower then VPN. This remote control is a workaround for the low bandwidth. Just to reset a password could take me 40min. without remote control. With remote control it takes about 15min. With VPN, I can do it in about 10 seconds because the laptop is on my network and left booted up. I just have to login to the VPN and double-click a VB app, type in the ID to reset and click OK.
Everyday tasks are accomplished as easily as if I were in the office directly connected. The productivity gains of working at home are amazing. You would not believe the distraction in a busy office. Noise, chit-chat, waiting in line at the cafeteria, worthless meetings, etc. I get so much more done it's not funny!
Dire Straits would sing "I WANT MY VPN" instead of "I WANT MY MTV".
Having been responsible for installing and managing OWA setups, I'd strongly recommend an imap client over OWA.
Someone who is used to the intermediate user features of Outlook (i.e. message filtering and folders [specifically, marking a group of message for moving into folders]) will find OWA a major PITA.
Sure, OWA is great for simple access to e-mail from a public kiosk. But OWA simply won't please the daily user of an Exchange e-mail system.
"Population 1,656"
I did a consulting gig for a small company that does landscaping. I noticed the boss was running OWA, and I asked him why don't he use outlook. His reply was, "This is outlook, see it says 'outlook'"
They had the exchange services provided by the ISP, guess that is a good thing becouse they didn't have a local admin to reboot exchange server all the time.
hmm... for fun I enjoy launching DDoS attacks against 127.87.42.5
I agree with you, and use IMAP (over SSL or VPN) myself when remote. However, e-mail's just the tip of the iceberg for most Outlook users. What do you do for Outlook's non-mail features i.e. the GAL (global address list), contacts, calendars, tasks, etc...? There's no way to access these over IMAP.
In my case I fall back to OWA or Outlook over VPN for those, but what if they weren't available?
BalamAt the risk of running afoul of the anti-upgrade/anti-microsoft sentiments on Slashdot, it should be noted that the next version of Office (which just went beta 2), in combination with Windows Server 2003 and Exchange 2003 (Titanium) will allow remote users to use the native Outlook client to connect to an Exchange server using XML-RPC over HTTPS. This should allow remote users to dump the need for VPN if all they're doing is connecting to Exchange. Combined with some strides that Microsoft has made in making Outlook work better in an offline/caching mode, this is a really decent solution for using Outlook if you're a remote user.
So far as OWA, Titanium has a much better interface than Exchange 5.5 (ugh) and even Exchange 2000. OWA will support creating and editing server-side rules, and now includes integrated spell-checking, so if the Windows Server 2003/Exchange 2003/Outlook 2003 combination is too daunting (either financially or technically), Exchange 2003 OWA would be a good second choice.
Bryan J. Casto
bryan.casto(a)gmail.com
I presume KDE libraries are available for OS X for free but suspect that the Qt component is pay-for on Macs. I don't know how hard it would be to Aquafy Kolab.
KMail is being groomed as an Exchange client and married to Kolab, which is being constructed (indirectly by the German government) as a FOSS replacement for Exchange.
Got time? Spend some of it coding or testing
about time too. outlook over a VPN over a modem sucks ass even when you have most everything caches in a .ost file.