Security

SimpleSYN is very concerned by the security of your Outlook® data. The communication of SimpleSYN is always highly encrypted. SimpleSYN uses the cryptographic technique AES256.

If the Peer Name Resolution Protocol is used for the connection SimpleSYN authenticates client and server through the server password. Additionally it is possible to authenticate and authorise the SimpleSYN-client through a user name and password. It is thus possible to realise different security access levels for different users.

If the Peer Name Resolution Protocol is not being used SimpleSYN assumes it is being carried out in a secure environment such as a domain network. Thus no authentication of the SimpleSYN-server or client takes place. The authentication of users is however still available without restrictions.

SimpleSYN is a client / server application. Therefore it is necessary for at least the SimpleSYN-server to be reachable for other computer. An open TCP port is needed. In default settings SimpleSYN uses the TCP port 9234.

 

Set available Outlook®folders

SimpleSYN allows unblocking every Outlook® folder separately, so that the SimpleSYN-server or SimpleSYN-client can only see and synchronize the Outlook® folders that have been unblocked explicitly beforehand. Thus it is possible to exclude an Outlook® folder with private data easily from synchronization

In the default settings all Outlook® folders are unblocked.

To confine the Outlook® folders for each synchronization partner, proceed as followed.

SimpleSYN has been configured as SimpleSYN-server

If SimpleSYN has been configured as SimpleSYN-server, click on “Synchronization Settings” to open the folder selection.

Select the user whose settings are to be changed under “Current user


Image 36: select available folders

Available folders

Select the checkbox “Clients can create new folders” to allow the SimpleSYN-clients to create new subfolders in the permitted folders. Deactivation of “Clients can create new folders” means no new folders can be created by the SimpleSYN-clients.

Activate the checkbox “Restrict available folders to selected folders” to only provide selected Outlook® folders for synchronization. Activation of this option provides checkboxes in front of the listed Outlook® folders. Here it is possible to select the folders the SimpleSYN-client can access. All unchecked folders are now invisible for the SimpleSYN-client.


All modifications will only be adopted after a click on “Save”. Click on “Back” or leave the options through another menu point to discard made modifications to the settings.

 

SimpleSYN has been configured as SimpleSYN-client

If SimpleSYN has been configured as SimpleSYN-client, click on “Synchronization Settings” and afterwards on “Advanced client settings” to limit the visible Outlook® folders for the SimpleSYN-server.


Image 37: limit available folders

Select the checkbox “Server can create new folders” to allow the SimpleSYN-server to create new Outlook® subfolders in the permitted folders. Deactivation of “Server can create new folders” means no new folders can be created by the SimpleSYN-server.

Activate the checkbox “Restrict available folders to selected folders” to only provide selected Outlook® folders for synchronization. Activation of this option provides checkboxes in front of the listed Outlook® folders. Here it is possible to select the folders the SimpleSYN-server can access. All unchecked folders are now invisible for the SimpleSYN-server.


All modifications will only be adopted after a click on “Save”. Click on “Back” or leave the options through another menu entry to discard made modifications to the settings.

 

Utilization of the user account “all users”

The utilization of the user account “All users” means that no further user authentication is done. Use of the Peer Name Resolution Protocol means that SimpleSYN-client and SimpleSYN-server are both being authenticated through the server password. Deactivation of the utilization of the Peer Name Resolution Protocol means no further authentication is done.

If the Peer Name Resolution Protocol is not being used any user in the local network is able to synchronize anonymously to the user account “All users”. If a third party has access to the local network the user account “All users” should be deactivated or deleted

SimpleSYN always uses the user account “All users” in default settings.

Authorization

SimpleSYN can be configured in a way that only authorized users can synchronize. The authorization is based on SimpleSYN internal users, local Windows® user accounts or Windows® domain user accounts. To activate authorization it is necessary to deactivate or delete the user account “All users” and to establish specific users.

In default settings the user account “All users” is used, therefore no authorization is happening.

As soon as the user account “All users” has been deactivated or deleted authorization is taking place.

User name / password authentication

SimpleSYN has an integrated user management. It uses user names and passwords for log-on.

Windows authentication

Alternatively to the integrated user management it is possible to log-on SimpleSYN-clients with the currently signed-up Windows® user or any Windows® user account to the SimpleSYN-server. Either domain user accounts or local user accounts can be used.


If local Windows® user accounts or domain user accounts are being used they have to have a password. Otherwise it is impossible to use said user account for log-on through the network.

 

Configuration of security settings

All security settings can be found on the SimpleSYN-server under “Synchronization Settings > Manage Users” and on the SimpleSYN-client under “Synchronization Settings > Advanced Client Settings”.

Server settings

If SimpleSYN has been configured as SimpleSYN-server it is possible to create integrated SimpleSYN user accounts or to provide Windows® user accounts in SimpleSYN. Open SimpleSYN and click on “Synchronization Settings”. Click on “Manage Users” to open the SimpleSYN user management.

 
Image 38: SimpleSYN server user management

All existing SimpleSYN users and their attributed Windows® user accounts are being shown here. Under “Used by” is shown which SimpleSYN-client is using a specified user.

The user account “All users” allows anonymous access to the SimpleSYN-server. If only selected users are supposed to be able to log-on deactivate or delete the user account “All users”.

A symbol in front of the user shows whether the user is activated or deactivated. Is a user deactivated a log-on to the SimpleSYN-server is impossible for said user.


Image 39: User activated


Image 40: User deactivated


All modifications will only be adopted after a click on “Save”. Click on “Back” or leave the options through another menu entry to discard made modifications to the settings.

 

Add user

To create a new user click on “Add user” to create a SimpleSYN integrated user; or click on “Add Windows- / Active-Directory-user” to use an existing local Windows® user account or a domain user account as SimpleSYN log-on.

SimpleSYN-user

Enter a unique user name and password to create an integrated user account. Confirm the dialog with “OK”.


Image 41: Add user

Add Windows- /Active-Directory-user

It is only possible to use local Windows® user accounts that have a password.

To use a local Windows® user account or a domain user in SimpleSYN select the user account through the standard windows dialog.


Image 42: Assign user account

Disable/enable users

To activate or deactivate a user account right click the according user account and select “Disable” or “Enable”.

Only activated users can log onto the SimpleSYN-server.

Edit users and change passwords

To edit an integrated SimpleSYN-user double click on the user or right click and select the menu item “Properties”. In the following dialog it is possible to change the user name or give a new password.


Image 43: Edit user

Should the selected user account be a local Windows® user account or a domain user account it is possible to select another user account.

Delete user

To completely delete a user right click the user and then on “Delete user”.


All modifications will only be adopted after a click on “Save”. Click on “Back” or leave the options through another menu entry to discard made modifications to the settings. 

 

Client settings

If the user accounts “All users” has been deactivated or deleted from the SimpleSYN-server and individual user accounts been created or a specific user account is supposed to be used for log-on of the SimpleSYN-client on the SimpleSYN-server, it is inevitable to enter the SimpleSYN-server log-on data onto the SimpleSYN-client.


Should the log-on to the SimpleSYN-server fail with the current settings the SimpleSYN-client will also prompt the entry of log-on data.

If SimpleSYN has been configured as SimpleSYN-client modifications of the log-on data can be done under “Synchronization Settings > Advanced Client Settings”.


Image 44: Client security settings

Activate the checkbox “Use shared configuration” to use the user account “All users”. In these settings no user authentication is taking place.

To activate the log-on with a specific user deactivate the checkbox “Use shared configuration”.

Log-on with an integrated SimpleSYN user

If an integrated SimpleSYN-user has been created on the SimpleSYN-server deactivate the checkbox “Use Windows authentication”. Enter the log-on data of the integrated SimpleSYN-user into the fields “User name” and “Password”.

Log-on with a Windows® user account

If a Windows® user account or domain user account has been added on the SimpleSYN-server and it is supposed to be used for log-on activate the checkbox “Use Windows authentication”. Activate “Use current user” to log-on to the SimpleSYN-server with the currently used user account.

If the checkbox “Use current user” is activated the current user accounts needs to be known to the SimpleSYN-server. If it is a local user account a user account with identical name and password has to exist on the SimpleSYN-server computer.

Deactivate the checkbox “Use current user” to use any Windows® user account for log-on to the SimpleSYN-server. Enter the log-on data of the user into the fields “User name”, “Password” and “Domain”.


If a local Windows® user account is being used the field “Domain” is equal to the computer name of the SimpleSYN-server computer.


Save the entries with a click on “Save”. Click on “Back” or exit the advanced client settings through another menu entry to discard the settings.