Cloud Outages Highlight the Need for Monitoring and Planning
Microsoft has had a bad run lately. First, there was Solorigate, a major supply-chain attack...
For Exchange administrators, Office 365 is at the forefront of considerations for the future of email. When thinking about Office 365, my initial thoughts are, "what about security, compliance, and 3rd party systems that integrate with my current Exchange On-Premises implementation?"
After thinking further about what Office 365 means for any organization, I created this article which dives into a few key considerations for Office 365 as it relates to email and hopefully helps you decide what's best for your organization.
As I started investigating Office 365 I quickly learned that the general perception is that it's great for small companies. Two major reasons that stand out are cost affordability and these organizations have few 3rd party systems that integrate with their current Exchange On-Premises configurations. For large to mid-sized companies the conversation changed a bit; primarily related to organizational SLA models. Microsoft offers a 99% SLA, but this is not on ALL services to be available at the same time. For example, they will not guarantee that ActiveSync, Outlook Web App and mailboxes will have 99% up-time cumulatively. ActiveSync could be down, but mailbox access could be up. What is acceptable to your organization? With all the facts up front you can better set expectations for your company; regardless of size, if you choose to move your email into the cloud.
Microsoft has done a great job with Office 365 to meet security and compliance regulations. Microsoft can help you meet security regulations through isolated consumer data, Information Rights Management, 2-factor authentication and more. They also offer compliance features such as eDiscovery and auditing/retention. Their security model does meet specifications for both Sarbanes-Oxley and HIPPA. They also will ensure that your data is isolated from other organizations mail data. Microsoft has really gone out of their way to provide their customers comfort from a security aspect related to Office 365.
Several options related to accounts that will be used to authenticate with Office 365 are also offered. Dirsync uses SSL to synchronize with your Active Directory environment or Microsoft will set up separate accounts for you on their system. It’s good to know that there are options within this space each with advantages and disadvantages. For example, without the Dirsync integration users will likely need to authenticate to get to their email.
Examples of 3rd party products that might integrate with your On-Premises Exchange implementation are Blackberry, Goodlink, system-based relays, 3rd party systems that deliver voicemail to your mailbox, and 3rd party paging systems to name a few. It will be very important for you to consider all 3rd party systems that send mail through your Exchange system, because it is possible that you may have something that will not. If you are looking at Office 365, I would suggest that you work closely with Microsoft to determine if you will be able to integrate all of your 3rd party applications with their product option.
Another interesting option is Hybrid Office 365. This will allow you to keep Exchange On-Premises, but will allow you to archive older email to the cloud. From a technical perspective this requires an onsite server called an Exchange Hybrid server and then, based upon the needs and decisions of your organizations auditing and retention policies, you can store the older data in the cloud. Of course there are legal considerations surrounding this option, but as stated above, Microsoft has gone above and beyond to meet the regulatory compliance needs for any sized organization. This can be a really great option if it meets the needs of your business.
As you probably know Microsoft isn’t the only player with Email in the cloud. If you are going to consider other 3rd party vendors for this make sure you really do your homework. Make sure that what you are getting from your partner involves your ability to meet all the considerations noted above. For example, isolated data that meet compliance and regulatory guidelines will be important, understand their SLA’s, maintenance models and Exchange versions and their 3rd party product integration options before deciding against Microsoft as your Office 365 provider.
Whether or not to move to your organizational email to Office 365 or leave it On-Premises will truly depend on your organizations requirements for SLA’s, compliance and regulatory guidelines and 3rd party integration expectations. There will be cases where Office 365 will be a perfect fit and other situations where it may not be. Take the time to determine what is best for your organization.
If you found this article helpful you may be interested to learn how Mailscape can assist with Hybrid Exchange & Office 365 deployments. If you would like to evaluate Mailscape for yourself please let us know! You may request the trial here.
Theresa is a Sr. Technical Systems Administrator and has been working as a technical expert in IT for over 18 years. Theresa has her MCSE, CCA and EPIC ECSM certifications. Her areas of expertise are in the areas of Exchange, Active Directory, Lync, SharePoint and Citrix XenApp. She has architected, designed, implemented and led complex projects in all of these areas. She also is a public speaker, speaking at events such as Briforum 2013 and upcoming will be at E2E Virtulization conference in May 2014.
Microsoft has had a bad run lately. First, there was Solorigate, a major supply-chain attack...
A few weeks back, Microsoft announced the Public Preview of a new and very interesting feature,...