Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.
Contains	proprietary	and	con/idential	information	owned	by	Synacor,	Inc.	©	/	2015	Synacor,	Inc.	
Technical	Track	
Junior	B...
Contains	proprietary	and	con/idential	information	owned	by	Synacor,	Inc.	©	/	2015	Synacor,	Inc.	
Global	Pre-sales	Team	Lea...
•  Zimbra	Talk	
•  Cisco	UC	
•  Customizations	
3	May	16	 Zimbra	Partner	Summit	2016
Zimbra	Talk	
4	Zimbra	Partner	Summit	2016	May	16
Zimbra	Talk	-	Overview	
5	
Full	Web	
Chat	
&	Rooms	
Video	
Conference	
Open	Source	
Technology	
Realtime	
Collaboration	
S...
Zimbra	Talk	-	Overview	
6	May	16	 Zimbra	Partner	Summit	2016	
Single	or	group	conversations	
HD	video	and	audio	conversati...
7	Zimbra	Partner	Summit	2016	May	16	
Zimbra	Talk	-	Overview
Zimbra	Talk	–	Architecture	Overview	
8	
JappixMini	(XMPP	Client)	
JitsiMeet	(WebRTC)	
Prosody(XMPP)	
Jitsi	VideoBridge	 Ji...
Zimbra	Talk	Caveats	
•  DNS	server	needs	to	be	accessible	by	the	user,	Zimbra	
Server	and	the	Zimbra	Talk	Server	
•  Insta...
Other	Integrations	…	
10	Zimbra	Partner	Summit	2016	May	16
UC	Integrations	–	Cisco	
8.7	brings	back	UC	Integration:	
•  Click-2-Call§	
•  Visual	Voicemail	
•  Presence	Noti/ication	...
3rd	Party	Integrations	
Universal	Dialer	(from	Zetalliance)	
•  Support	as	many	PBX	systems	as	possible	allowing	to	origin...
3rd	Party	Integrations	
ownCloud	(from	Zetalliance)	
•  Designed	for	Zimbra	version	8.6	and	ownCloud	versions	8	and	9	
•  ...
3rd	Party	Integrations	–	ownCloud		
14	Zimbra	Partner	Summit	2016	May	16
3rd	Party	Integrations	–	ownCloud	
15	Zimbra	Partner	Summit	2016	May	16
Other	Zimlets	…	
•  So,	what	else	can	you	do	with	Zimlets?	
•  One	of	our	developers	wrote	this	next	zimlet	in	an	
hour	ju...
Fun	Zimlets	…	
•  Disable	delete	option	–	Remove	the	option	from	the	toolbar	and	the	
right-click	context	menu	and	also	di...
Customizations	
Skin	and	Theme	Customizations	
18	Zimbra	Partner	Summit	2016	May	16
Themes	and	Skins	
•  Zimbra	web	client	allows	customization	of	the	look	and	
feel	using	skins	
•  Skins	can	be	applied	at	...
Domain	–	Skin	Settings	
20	Zimbra	Partner	Summit	2016	May	16	
No	restart	required!	Con/igure	->	Domain	->	Theme
Anatomy	of	a	Skin	
•  Zimbra	WebApps	-	/opt/zimbra/jetty/webapps/zimbra/	
•  Individual	skin	–	WebApps/skins/<skin_name>	
...
Sample	Skin	
# Sample Skin
SkinName = MySkin
SkinVersion = 1.0
LogoImgDir = /zimbra/skins/@SkinName@/logos
LogoURL = http:...
Sample	Skin	
23	Zimbra	Partner	Summit	2016	May	16
Sample	Skin	
24	Zimbra	Partner	Summit	2016	May	16
Other	Skin	Files	… 		
•  skin.html	–	Provides	structure	to	the	application	layout	
(eg:	where	to	put	components	like	the	O...
Touch	Client	Logos	
•  Logo	on	the	login	and	splash	screens	for	the	Touch	Client	
1.  Low	DPI	devices	–	/skins/_base/logos...
27
©2015	Zimbra,	Inc.	All	rights	reserved.	Zimbra	and	its	
symbol	are	registered	trademarks	of	Zimbra,	Inc.	Other	
company	an...
Contains	proprietary	and	con/idential	information	owned	by	Synacor,	Inc.	©	/	2015	Synacor,	Inc.	
Product	Specialist	
How	t...
•  Introduction	
•  Prerequisites	
•  Early	Planning	
•  Prepare	Source	Environment	
•  Prepare	Middle	Environment	
•  Pre...
Introduction	
31
Introduction	
•  This	presentation	provides	high	level	steps	to	follow	when	
migrating	from	Exchange	2013	to	Zimbra	Networ...
Prerequisites	
33
Prerequisites	
•  Both	the	Source	and	the	Destination	systems	must	be	
functional	
•  Destination	environment	(Zimbra	syst...
Early	Planning	
35
Early	Planning	
•  De/ine	Migration	Strategy	(
https:///iles.zimbra.com/website/docs/8.6/
Zimbra_Migration_Exchange_Admin_...
Prepare	Source	Environment	
37
Prepare	Source	Environment	
•  Prepare	Exchange	Administrator	account	for	Outlook	
Pro/ile	
•  Make	sure	the	necessary	por...
Prepare	Middle	Environment	
39
Prepare	Middle	Environment	
•  Install	Windows	OS	
•  Create	Outlook	Administrator	Pro/ile	
•  Install	Zimbra	Migration	To...
Prepare	Destination	Environment	
41
Prepare	Destination	Environment	
•  Make	sure	the	necessary	ports	are	opened	(443,	7071)	
•  Create	distribution	list	with...
Zimbra	Migration	Tool	Steps	
43
Zimbra	Migration	Tools	Steps	
•  Run	Zimbra	Miration	Tool	as	administrator	
	
44
Zimbra	Migration	Tools	Steps	
•  Choose	Server	Migration	
45
Zimbra	Migration	Tools	Steps	
•  Choose	Outlook	Pro/ile	
46
Zimbra	Migration	Tools	Steps	
•  Choose	destination	Zimbra	Server	
47
Zimbra	Migration	Tools	Steps	
•  Choose	the	items	and	/ilter	the	Inbox	
48
Zimbra	Migration	Tools	Steps	
•  To	select	users,	click	LDAP	Browser	
49
Zimbra	Migration	Tools	Steps	
•  To	select	users,	click	LDAP	Browser	
50
Zimbra	Migration	Tools	Steps	
•  Con/irm	the	users,	
afterward	click	
Next	
51
Zimbra	Migration	Tools	Steps	
•  Wait	until	the	migration	complete	
52
Zimbra	Migration	Tools	Steps	
•  Wait	until	the	migration	complete	
53
MX	Record	Cutover	
54
MX	Record	Cutover	
•  Change	over	MX	records	on	the	DNS	Editor	Portal	
55
Post	Migration	
	
56
Post	Migration	
•  Check	Zimbra	Service	
•  Check	User	Accounts	
•  Check	Distribution	List	
•  Check	Room	List	
•  Check	...
58
©2015	Zimbra,	Inc.	All	rights	reserved.	Zimbra	and	its	
symbol	are	registered	trademarks	of	Zimbra,	Inc.	Other	
company	an...
Contains	proprietary	and	con/idential	information	owned	by	Synacor,	Inc.	©	/	2015	Synacor,	Inc.	
Product	Development	and	O...
•  Zimbra	and	MS	Exchange	co-exist	overview	
•  Con/igure	on	both	system	
v  Mail	/low	and	integration	
•  Manage	user	by	...
Zimbra	and	MS	Exchange	co-exist	
overview	
62
Purposes	
•  Migrate	legacy	LEGO	OpenSource	email	to	Zimbra	
•  Single	panel	of	user	management	in	MS	Exchange	Console	
• ...
Design	
64
Big	picture	design	
65	
Active	Directory	
Domain	Controller
Active	Directory	
Domain	Controller
Exchange	Server Exchange	S...
ConQigure	on	both	systems	
66
MS	Exchange	ConQigure	
•  Send	Connector	
•  Receive	Connector	
67
Send	Connector	by		
Exchange	Management	Console	
68
Receive	Connector	by	
Exchange	Management	Console	
69
Zimbra	ConQigure	
•  Accept	All	email		(avoid	recipient	check	error)	
	
•  De/ine	default	route	email	to	MS	Exchange	Edge	...
Manage	user	by		
MS	Exchange	Admin	Console	
71
Exchange	Management	Console	
72	
Mailbox	User	object	is	used	by	MS	Exchange
73	
Mail	User	will	be	used	by	Zimbra	
Mail	User	located	in	Mail	Contact	object	
Mail	User	combine	Mail	Information	Attribu...
Automatic	User	Provisioning	from	
Active	Directory	User	
74
Automatic	User	Provisioning	
•  Add	this	zimbra	provision	command	line	by	
v  zmprov	<	prov-script.txt	
75
Automatic	provisioning	,	Need	to	know	
v  Mode	
v  Attribute	Mapping	
76
GAL	ConQigure	and		
Authentication	ConQigure	
77
GAL	ConQigure	by	Zimbra	Admin	UI	
78
Authentication	ConQigure	by	Zimbra	
Admin	UI	
79
Active	Directory	Password	Change	
Adapter	
80
Get	ADPassword	from	extend	
81
v  Copy	plugin	adPassword.jar	in	mailbox	server
v  Con/igure	domain	authentication	follow	above	step	
82
ADPassword	
v  IMPORTANT	NOTE	
§  Authentication	Con/igure	to	Active	Directory	must	select	SSL
§  To	select	SSL	,	You	have...
Z	and	E	
Let’s	go	together	
Q	and	A	
84
©2015	Zimbra,	Inc.	All	rights	reserved.	Zimbra	and	its	
symbol	are	registered	trademarks	of	Zimbra,	Inc.	Other	
company	an...
Contains	proprietary	and	con/idential	information	owned	by	Synacor,	Inc.	©	/	2015	Synacor,	Inc.	
Executive	Director	
Zimbr...
•  Introduction	
•  Key	Projects	
•  Addressing	common	issues	
•  Deploying	on	AWS	
87
Introduction	
Background	on	My	Directory	Sdn	Bhd	
88
My	Directory	Sdn	Bhd	
•  Established	in	1999	as	a	Linux	company	offering	Internet	
services	and	solutions.	
•  Founder:	Mr...
Key	Projects	
Projects	that	move	us	forward	
90
Zimbra	for	State	Government,	2010	
•  Migrate	from	Netscape	Messaging	to	Zimbra	
•  Setup	Split-Domain	to	allow	old	and	ne...
Zimbra	Email	for	ISP,	2011	
•  Migrate	from	Scalix	to	Zimbra	
•  On-shot	migration	because	less	data	involved.	
•  Total	a...
Addressing	common	issues	
What	are	common	Zimbra	issues	and	
how	to	address	them?	
93
Issue:	A	lot	of	spam!	
•  Make	sure	Zimbra	is	enabled	to	update	spam	rules:		
1.  Read:	
https://wiki.zimbra.com/wiki/Impr...
Issue:	Untrusted	self-signed	SSL	
•  Use	a	commercial	cert.	
•  Can	get	FREE	commercial	cert	from	StartCom	Ltd	
(startssl....
Issue:	Compromised	accounts	
•  Some	users	lost	their	accounts	due	to	phishing	trap.	
•  Use	Two-Factor-Authentication	–	a...
Issue:	IP	blacklisted	
•  Sending	too	many	mails	can	cause	IP	blacklisted.	
•  Solutions:	
1.  Ensure	RDNS	is	done.	
2.  W...
Example	sizing	
Our	commonly	used	server	sizing	
98
Sizing:	100	~	200	users	
•  Small	deployment	work	well	on	low	end	system:	
1.  Any	modern	processor	with	4	cores	above.	
2...
Sizing:	500	~	1,000	users	
•  Use	VMware	ESXi	and	run	Zimbra	as	VM:	
1.  Any	modern	processor	with	4	cores	above	
2.  8GB	...
Sizing:	10,000	users	
•  Use	VMware	ESXi	and	run	Zimbra	as	VM:	
1.  Any	modern	processor	with	4	cores	above	
2.  16GB	–	32...
Deploying	on	AWS	
•  We	have	Zimbra	Hosting	at	AWS	Singapore	region.	
•  Main	attraction	for	using	AWS:	
1.  We	/inally	ca...
Thank	You!	
103
©2015	Zimbra,	Inc.	All	rights	reserved.	Zimbra	and	its	
symbol	are	registered	trademarks	of	Zimbra,	Inc.	Other	
company	an...
Upcoming SlideShare
Loading in …5
×

Zimbra APxJ Partner Summit - Techincal Track

Zimbra APxJ Partner Summit - Techincal Track

Zimbra APxJ Partner Summit - Techincal Track

  1. 1. Contains proprietary and con/idential information owned by Synacor, Inc. © / 2015 Synacor, Inc. Technical Track Junior Ballroom 3 2.30pm – 5.00pm
  2. 2. Contains proprietary and con/idential information owned by Synacor, Inc. © / 2015 Synacor, Inc. Global Pre-sales Team Lead Zimbra Integrations and Customisations Gautam Ramachandran
  3. 3. •  Zimbra Talk •  Cisco UC •  Customizations 3 May 16 Zimbra Partner Summit 2016
  4. 4. Zimbra Talk 4 Zimbra Partner Summit 2016 May 16
  5. 5. Zimbra Talk - Overview 5 Full Web Chat & Rooms Video Conference Open Source Technology Realtime Collaboration Screen Sharing Zimbra Talk May 16 Zimbra Partner Summit 2016
  6. 6. Zimbra Talk - Overview 6 May 16 Zimbra Partner Summit 2016 Single or group conversations HD video and audio conversations Buddy and Presence management Flexible window sizes for chat and video Availability and Scalability for Enterprise Advanced video streaming statistics Real time document collaboration Back to the past, history conversations
  7. 7. 7 Zimbra Partner Summit 2016 May 16 Zimbra Talk - Overview
  8. 8. Zimbra Talk – Architecture Overview 8 JappixMini (XMPP Client) JitsiMeet (WebRTC) Prosody(XMPP) Jitsi VideoBridge Jisti Conference
  9. 9. Zimbra Talk Caveats •  DNS server needs to be accessible by the user, Zimbra Server and the Zimbra Talk Server •  Installer creates a zone /ile that can be used with dnsmasq •  All the certi/icates used by the Zimbra Talk server must be valid and cover all required names o  yourdomain.tld o  xmpp.yourdomain.tld o  conference.yourdomain.tld o  external.yourdomain.tld o  conference.external.yourdomain.tld o  auth.yourdomain.tld o  jitsi-videobridge.yourdomain.tld o  focus.yourdomain.tld 9 Zimbra Partner Summit 2016 May 16
  10. 10. Other Integrations … 10 Zimbra Partner Summit 2016 May 16
  11. 11. UC Integrations – Cisco 8.7 brings back UC Integration: •  Click-2-Call§ •  Visual Voicemail •  Presence Noti/ication •  WebEx (WebEx Cloud and WebEx On-Premise) •  ZD support for WebEx •  Roadmap – ZD support for Click2Call § - will work without the Cisco Unity Connection server which was a dependency in 8.5 or lower 11 Zimbra Partner Summit 2016 May 16
  12. 12. 3rd Party Integrations Universal Dialer (from Zetalliance) •  Support as many PBX systems as possible allowing to originate a call through a SIP phone •  Support 1.  SipX/SipXecs (working) 2.  Asterisk (working, to be improved) 3.  3cx (not tested) 4.  MetaSwitch (not tested) •  Available from here – https://github.com/ZeXtras/universal-dialer 12 Zimbra Partner Summit 2016 May 16
  13. 13. 3rd Party Integrations ownCloud (from Zetalliance) •  Designed for Zimbra version 8.6 and ownCloud versions 8 and 9 •  Demo video: https://www.youtube.com/watch?v=gfVLE22kJ6o •  User manual : http://barrydegraaff.github.io/owncloud/ •  Available from here – https://github.com/Zimbra-Community/owncloud-zimlet 13 Zimbra Partner Summit 2016 May 16
  14. 14. 3rd Party Integrations – ownCloud 14 Zimbra Partner Summit 2016 May 16
  15. 15. 3rd Party Integrations – ownCloud 15 Zimbra Partner Summit 2016 May 16
  16. 16. Other Zimlets … •  So, what else can you do with Zimlets? •  One of our developers wrote this next zimlet in an hour just for fun! 16 Zimbra Partner Summit 2016 May 16
  17. 17. Fun Zimlets … •  Disable delete option – Remove the option from the toolbar and the right-click context menu and also disable the delete keys 17 Zimbra Partner Summit 2016 May 16 Right-Click Context Menu Toolbar and Actions Menu
  18. 18. Customizations Skin and Theme Customizations 18 Zimbra Partner Summit 2016 May 16
  19. 19. Themes and Skins •  Zimbra web client allows customization of the look and feel using skins •  Skins can be applied at the user/domain/server Chameleon Skin •  Theme applied to a domain •  The chameleon skin is *not* a skin at all •  Instead, it is a collection of LDAP attributes that affect the appearance of *all* of the skins for a given domain 19 Zimbra Partner Summit 2016 May 16
  20. 20. Domain – Skin Settings 20 Zimbra Partner Summit 2016 May 16 No restart required! Con/igure -> Domain -> Theme
  21. 21. Anatomy of a Skin •  Zimbra WebApps - /opt/zimbra/jetty/webapps/zimbra/ •  Individual skin – WebApps/skins/<skin_name> •  https:///iles.zimbra.com/docs/skins/Themes.html •  Main components of a skin – 1.  manifest.xml - XML /ile that describes the skin to the application. Each /ile item in the manifest represents a /ile that will be loaded in as part of your skin. 2.  skin.properties - sets up most skin variables (override from skins/_base/base3/skin.properties) 3.  Copy an existing skin (sand or lake) to a new skin 21 Zimbra Partner Summit 2016 May 16
  22. 22. Sample Skin # Sample Skin SkinName = MySkin SkinVersion = 1.0 LogoImgDir = /zimbra/skins/@SkinName@/logos LogoURL = http://www.yourcompany.com LoginBannerImg = @LogoImgDir@/LoginBanner.png LoginBanner = @img(, LoginBannerImg, 500px, 160px)@ AppBannerImg = @LogoImgDir@/AppBanner.png AppBanner = @img(, AppBannerImg, 110px, 35px)@ LogoWidth = 120px; AppC = #fec855 #base color of the background and most of the application AltC = #ddbc76 #base color for toolbars and highlighted buttons SelC = #ffffcc #highlight color for lists, such as the list of messages 22 Zimbra Partner Summit 2016 May 16 WebAppsskins |------- MySkin |------ skin.properties |------ manifest.xml |------ logos |------ LoginBanner.png |------ AppBanner.png
  23. 23. Sample Skin 23 Zimbra Partner Summit 2016 May 16
  24. 24. Sample Skin 24 Zimbra Partner Summit 2016 May 16
  25. 25. Other Skin Files … •  skin.html – Provides structure to the application layout (eg: where to put components like the Overview Tree and Mini-Calendar) •  splash.html – Provides HTML for the Splash Screen, which is displayed to the user as the application is loading. •  skin.js – Provides a bridge or Application Programming Interface (API) between the skin and the main application code of the ZWC (eg: custom menus, changes in Preferences) •  skin.css – CSS selectors for the skin and splash screen themselves 25 Zimbra Partner Summit 2016 May 16
  26. 26. Touch Client Logos •  Logo on the login and splash screens for the Touch Client 1.  Low DPI devices – /skins/_base/logos/TouchLonginBanner.png Dimension of the graphic must be exactly 300 x 65. 2.  Retina display - /skins/_base/logos/TouchLonginBanner@2x.png Dimemsion of the graphic must be exactly 600 x 130. •  Watermark image in the bottom right of an email 1.  Low DPI devices – /skins/_base/logos/TouchWatermarkBanner.png Dimension of the graphic must be exactly 200 x 45. 2.  Retina display – /skins/_base/logos/TouchWatermarkBanner@2x.png Dimension of the graphic must be exactly 400 x 90. •  Bookmark image on the Springboard (Phone) 1.  Low DPI devices – /img/logo/Icon.png (57 x 57) 2.  Retina display – /img/logo/Icon@2x.png (114 x 114 ) 26 Zimbra Partner Summit 2016 May 16
  27. 27. 27
  28. 28. ©2015 Zimbra, Inc. All rights reserved. Zimbra and its symbol are registered trademarks of Zimbra, Inc. Other company and product names mentioned are property of their respective owners. The contents of this publication are subject to change without noti/ication, are the property of Zimbra, and cannot be reproduced without Zimbra’s written permission. The contents of this publication are not a commitment by Zimbra to provide the features and bene/its described. Zimbra 3000 Internet Blvd., Suite 200 Frisco, TX 75034 USA Main: +1 972-407-0688 Main US toll-free: 877-492-9484 Sales: +1 972-407-0688 www.zimbra.com 28
  29. 29. Contains proprietary and con/idential information owned by Synacor, Inc. © / 2015 Synacor, Inc. Product Specialist How to migrate Microsoft Exchange Services to Zimbra Network Edition Services Zulkarnaen Arsi 29
  30. 30. •  Introduction •  Prerequisites •  Early Planning •  Prepare Source Environment •  Prepare Middle Environment •  Prepare Destination Environment •  Zimbra Migration Tool Steps •  MX Record Cutover •  Post Migration 30
  31. 31. Introduction 31
  32. 32. Introduction •  This presentation provides high level steps to follow when migrating from Exchange 2013 to Zimbra Network Edition 8.6.0 32 Exchange Systems (source environment) Middle Server (windows) Zimbra Systems (destination environment)
  33. 33. Prerequisites 33
  34. 34. Prerequisites •  Both the Source and the Destination systems must be functional •  Destination environment (Zimbra systems) must meet sizing requirement •  All environment can communicate each other (speci/ic ports should be opened) •  Latest Version of Zimbra Migration Tools installed on Middle Server 34
  35. 35. Early Planning 35
  36. 36. Early Planning •  De/ine Migration Strategy ( https:///iles.zimbra.com/website/docs/8.6/ Zimbra_Migration_Exchange_Admin_8.6.0.pdf) •  Plan DNS Con/iguration Change •  Plan how to educate end user to understand that Zimbra features not completely same as Exchange features •  Plan the rollback scenario 36
  37. 37. Prepare Source Environment 37
  38. 38. Prepare Source Environment •  Prepare Exchange Administrator account for Outlook Pro/ile •  Make sure the necessary ports are opened in order to connect to the Exchange server (TCP 443) and Active Directory Server (TCP/UDP 389, TCP 3268) •  Capture existing distribution list •  Capture existing Room List •  Capture existing aliases 38
  39. 39. Prepare Middle Environment 39
  40. 40. Prepare Middle Environment •  Install Windows OS •  Create Outlook Administrator Pro/ile •  Install Zimbra Migration Tool 40 Exchange Systems (source environment) Middle Server (windows) Zimbra Systems (destination environment)
  41. 41. Prepare Destination Environment 41
  42. 42. Prepare Destination Environment •  Make sure the necessary ports are opened (443, 7071) •  Create distribution list with no members (one by one manually) •  Create Room List (one by one manually) •  Create Aliases (one by one manually) 42
  43. 43. Zimbra Migration Tool Steps 43
  44. 44. Zimbra Migration Tools Steps •  Run Zimbra Miration Tool as administrator 44
  45. 45. Zimbra Migration Tools Steps •  Choose Server Migration 45
  46. 46. Zimbra Migration Tools Steps •  Choose Outlook Pro/ile 46
  47. 47. Zimbra Migration Tools Steps •  Choose destination Zimbra Server 47
  48. 48. Zimbra Migration Tools Steps •  Choose the items and /ilter the Inbox 48
  49. 49. Zimbra Migration Tools Steps •  To select users, click LDAP Browser 49
  50. 50. Zimbra Migration Tools Steps •  To select users, click LDAP Browser 50
  51. 51. Zimbra Migration Tools Steps •  Con/irm the users, afterward click Next 51
  52. 52. Zimbra Migration Tools Steps •  Wait until the migration complete 52
  53. 53. Zimbra Migration Tools Steps •  Wait until the migration complete 53
  54. 54. MX Record Cutover 54
  55. 55. MX Record Cutover •  Change over MX records on the DNS Editor Portal 55
  56. 56. Post Migration 56
  57. 57. Post Migration •  Check Zimbra Service •  Check User Accounts •  Check Distribution List •  Check Room List •  Check send / receive email •  Change end user outlook con/iguration 57
  58. 58. 58
  59. 59. ©2015 Zimbra, Inc. All rights reserved. Zimbra and its symbol are registered trademarks of Zimbra, Inc. Other company and product names mentioned are property of their respective owners. The contents of this publication are subject to change without noti/ication, are the property of Zimbra, and cannot be reproduced without Zimbra’s written permission. The contents of this publication are not a commitment by Zimbra to provide the features and bene/its described. Zimbra 3000 Internet Blvd., Suite 200 Frisco, TX 75034 USA Main: +1 972-407-0688 Main US toll-free: 877-492-9484 Sales: +1 972-407-0688 www.zimbra.com 59
  60. 60. Contains proprietary and con/idential information owned by Synacor, Inc. © / 2015 Synacor, Inc. Product Development and Operation Lead MFEC Public Company Limited Zimbra and MS Exchange co-exist within same domain Jaruwat Boonmee 60
  61. 61. •  Zimbra and MS Exchange co-exist overview •  Con/igure on both system v  Mail /low and integration •  Manage user by MS Exchange console •  Automatic user provisioning •  GAL Con/igure and Authentication Con/igure •  Active Directory password change •  Q and A 61 <Company Logo>
  62. 62. Zimbra and MS Exchange co-exist overview 62
  63. 63. Purposes •  Migrate legacy LEGO OpenSource email to Zimbra •  Single panel of user management in MS Exchange Console •  Maintain single user store to better single password policy •  Single Global contact for both system 63
  64. 64. Design 64
  65. 65. Big picture design 65 Active Directory Domain Controller Active Directory Domain Controller Exchange Server Exchange Server Edge Transport Server Edge Transport ServerZCS frontend ServerZCS frontend Server SMTP Connector Mailbox ServerMailbox Server Exchange Management Console
  66. 66. ConQigure on both systems 66
  67. 67. MS Exchange ConQigure •  Send Connector •  Receive Connector 67
  68. 68. Send Connector by Exchange Management Console 68
  69. 69. Receive Connector by Exchange Management Console 69
  70. 70. Zimbra ConQigure •  Accept All email (avoid recipient check error) •  De/ine default route email to MS Exchange Edge Server •  De/ine RelayHost via MS Exchange Edge Server •  De/ine SMTP submission host to MS Exchange Edge Server •  Disable DNS lookup 70 zmprov mcf zimbraMtaDnsLookupsEnabled FALSE zmprov md boonmee.org zimbraMailCatchAllAddress @boonmee.org zmprov md boonmee.org zimbraMailCatchAllForwardingAddress @boonmee.org zmprov md boonmee.org zimbraMailTransport smtp:ad-ex.boonmee.org:25 zmprov mcf zimbraMtaRelayHost ad-ex.boonmee.org:25 zmprov ms $(zmhostname) zimbraSmtpHostname ad-ex.boonmee.org:25
  71. 71. Manage user by MS Exchange Admin Console 71
  72. 72. Exchange Management Console 72 Mailbox User object is used by MS Exchange
  73. 73. 73 Mail User will be used by Zimbra Mail User located in Mail Contact object Mail User combine Mail Information Attribute with Active Directory User
  74. 74. Automatic User Provisioning from Active Directory User 74
  75. 75. Automatic User Provisioning •  Add this zimbra provision command line by v  zmprov < prov-script.txt 75
  76. 76. Automatic provisioning , Need to know v  Mode v  Attribute Mapping 76
  77. 77. GAL ConQigure and Authentication ConQigure 77
  78. 78. GAL ConQigure by Zimbra Admin UI 78
  79. 79. Authentication ConQigure by Zimbra Admin UI 79
  80. 80. Active Directory Password Change Adapter 80
  81. 81. Get ADPassword from extend 81
  82. 82. v  Copy plugin adPassword.jar in mailbox server v  Con/igure domain authentication follow above step 82
  83. 83. ADPassword v  IMPORTANT NOTE §  Authentication Con/igure to Active Directory must select SSL §  To select SSL , You have to import Active Directory CA Certi/icate into java certi/icate store 83
  84. 84. Z and E Let’s go together Q and A 84
  85. 85. ©2015 Zimbra, Inc. All rights reserved. Zimbra and its symbol are registered trademarks of Zimbra, Inc. Other company and product names mentioned are property of their respective owners. The contents of this publication are subject to change without noti/ication, are the property of Zimbra, and cannot be reproduced without Zimbra’s written permission. The contents of this publication are not a commitment by Zimbra to provide the features and bene/its described. Zimbra 3000 Internet Blvd., Suite 200 Frisco, TX 75034 USA Main: +1 972-407-0688 Main US toll-free: 877-492-9484 Sales: +1 972-407-0688 www.zimbra.com 85
  86. 86. Contains proprietary and con/idential information owned by Synacor, Inc. © / 2015 Synacor, Inc. Executive Director Zimbra Deployment – Best Practices Naisiew Yeak 86
  87. 87. •  Introduction •  Key Projects •  Addressing common issues •  Deploying on AWS 87
  88. 88. Introduction Background on My Directory Sdn Bhd 88
  89. 89. My Directory Sdn Bhd •  Established in 1999 as a Linux company offering Internet services and solutions. •  Founder: Mr. Naisiew Yeak. •  Became Zimbra VAR in year 2009. •  Our business focus today: Zimbra Deployment. •  Other services – Linux support & services, VMware virtualization and AWS cloud migration. 89
  90. 90. Key Projects Projects that move us forward 90
  91. 91. Zimbra for State Government, 2010 •  Migrate from Netscape Messaging to Zimbra •  Setup Split-Domain to allow old and new system to work together. •  Create Self-Service portal for users to approve migrate •  Total accounts: 20,000 •  Active users: 10,000 •  Number of domains: 10 •  Platform: VMware VM •  Scope: Consult, deploy, customize theme, develop migration script, Preauth SSO, training and technology transfer. 91
  92. 92. Zimbra Email for ISP, 2011 •  Migrate from Scalix to Zimbra •  On-shot migration because less data involved. •  Total accounts: 40,000 •  Active users: 5,000 •  Number of domains: 200 •  Platform: physical servers with RH cluster in Production and RH virtualization in DR •  Scope: Consult, deploy, customize theme, develop migration script, DR failover/fallback script, and MySQL replication. 92
  93. 93. Addressing common issues What are common Zimbra issues and how to address them? 93
  94. 94. Issue: A lot of spam! •  Make sure Zimbra is enabled to update spam rules: 1.  Read: https://wiki.zimbra.com/wiki/Improving_Anti-spam_system 2.  zmlocalcon/ig -e antispam_enable_rule_updates=true 3.  zmlocalcon/ig -e antispam_enable_restarts=true •  Adjust autolearn threashold. 1.  bayes_auto_learn_threshold_nonspam -2.0 2.  bayes_auto_learn_threshold_spam 9.0 •  Integrate 3rd party solution such as E.F.A. Project (efa- project.org), or use commercial Barracuda Email Security Gateway. 94
  95. 95. Issue: Untrusted self-signed SSL •  Use a commercial cert. •  Can get FREE commercial cert from StartCom Ltd (startssl.com). •  Valid for 1 year. If expired, generate again. •  Domain validated for “mail.your-domain.com” and “your- domain.com”. 95
  96. 96. Issue: Compromised accounts •  Some users lost their accounts due to phishing trap. •  Use Two-Factor-Authentication – available in Zimbra 8.7. •  Before 8.7 publicly available, restrict email access to local network only and use VPN for external connection. 96
  97. 97. Issue: IP blacklisted •  Sending too many mails can cause IP blacklisted. •  Solutions: 1.  Ensure RDNS is done. 2.  Whitelist IP with dnswl.org, barracudacentral.org. etc. 3.  Sign up mxtoolbox.com to monitoring your IP. 4.  Slow down sending rate for bulk sender. 5.  Integrate with AWS SES just in case. •  There are more to learn and discover… 97
  98. 98. Example sizing Our commonly used server sizing 98
  99. 99. Sizing: 100 ~ 200 users •  Small deployment work well on low end system: 1.  Any modern processor with 4 cores above. 2.  4GB RAM min. 3.  RAID1 on 2 disks (7.2K) 4.  Direct install on physical server. •  Example customer spec: Dell Optiplex 3010, 4GB RAM, 1TB SATA. 99
  100. 100. Sizing: 500 ~ 1,000 users •  Use VMware ESXi and run Zimbra as VM: 1.  Any modern processor with 4 cores above 2.  8GB – 16GB RAM 3.  RAID6 on 8 disks above (7.2K) 4.  Run as VM in single or multiserver mode. 5.  Could add other VM such as EFA, pfSense, etc. •  Example customer spec: VMware ESXi, 4C, 16GB RAM, iSCSI 100
  101. 101. Sizing: 10,000 users •  Use VMware ESXi and run Zimbra as VM: 1.  Any modern processor with 4 cores above 2.  16GB – 32GB RAM 3.  RAID6 on 10 disks above (10K) – watch out for IOPs 4.  Run in multiserver mode. 5.  Could add other VM such as EFA, pfSense, etc. •  Example customer spec: VMware ESXi, 4C, 16GB RAM, FC SAN. 101
  102. 102. Deploying on AWS •  We have Zimbra Hosting at AWS Singapore region. •  Main attraction for using AWS: 1.  We /inally can add values to our email hosting services. 2.  No longer bogged down by insuf/icient bandwidth, IOPs, disk space, scalability, backup or redundancy. •  With AWS, we could offer unbeatable Zimbra Hosting for small and large businesses. •  Current sizing 1.  T2.micro – for ldap and proxy with 8GB disk space. 2.  T2.small – for mta with 20GB disk space. 3.  T2.medium – for mailbox up to 1,000 users. 102
  103. 103. Thank You! 103
  104. 104. ©2015 Zimbra, Inc. All rights reserved. Zimbra and its symbol are registered trademarks of Zimbra, Inc. Other company and product names mentioned are property of their respective owners. The contents of this publication are subject to change without noti/ication, are the property of Zimbra, and cannot be reproduced without Zimbra’s written permission. The contents of this publication are not a commitment by Zimbra to provide the features and bene/its described. Zimbra 3000 Internet Blvd., Suite 200 Frisco, TX 75034 USA Main: +1 972-407-0688 Main US toll-free: 877-492-9484 Sales: +1 972-407-0688 www.zimbra.com 104

×