Virtual Keyboard For Exchange 2003 OWA

[Oguz Kutlu Asik]

Hi,

Is there anyone using a server side virtual keyboard to enter user/pass credentials on login screen of Outlook Web Access (form based authentication)? Or is there any application/product like that to make owa more secure like banks did on their web pages?

Thanks in advance.

[Igor Karasik]

I think you need to use SSL as first step in order to secure OWA.
http://www.petri.co.il/configure_ssl_on_owa.htm
You can also customize the Logon.asp file
http://www.msexchange.org/tutorials/OWA2003Forms-based-Authentication-default-domain.html
What you mean by "server side virtual keyboard" ?

[Oguz Kutlu Asik]

Yep, i know about points you've directed me. What i mean by server side is you don't have to install any program on the client.

User will have to use virtual keyboard (like a keyboard on same web page) to enter credentials, so neither keyloggers nor trojans will have a chance to log those credentials on public computers.

I wonder if any solution exists integrating with owa.

[Igor Karasik]

Ok, now I understand.
I don't know about virtual keyboard solution for OWA, but most of VPN SSL portal solutions have virtual keyboard possibility.
For example, F5:
http://www.f5.com/solutions/technology/sslvpn_wp.html
" A secure "virtual keyboard" enables secure password entry from the mouse instead of the keyboard. When engaged, this feature enables users to securely enter a password on a system that has been compromised by a key logger"
I am pretty sure other VPN SSL solutions have similar feature.
And you can define OWA just as part of your portal.

[Oguz Kutlu Asik]

Thanks, but only virtual keyboard, not other features i need.

I think i found one. I'm talking about something like this.
http://imtranslator.net/keyboard.asp