Hybrid Architecture. Office 365. On-premises Exchange org (Exchange 2007+) Provisioned via DirSync. Secure Mail flow

Transcription

1 Hybrid Deployment

2 Hybrid Architecture Provisioned via DirSync Exchange 2010 (HUB/CAS) Exchange 2013 CAS & MBX Secure Mail flow Exchange Federation (Free/Busy, Mail Tips, Archive, etc.) Mailbox data via Mailbox Replication Service (MRS) Office 365 On-premises Exchange org (Exchange 2007+)

3 Hybrid Features Cloud Based Archiving Secure Mail Routing between on premise / online Unified Global Address List Centralized mail flow Outbound Single Outlook WebApp URL for Online / on Premise Move Mailbox On Premise to Online Centralized Management Console Message Tracking / Mail Tips / MultiMailbox Search

4 Hybrid Deployment Components Microsoft Office 365 Hybrid Configuration Wizard Exchange On Premise Hybrid Servers Minimum HUB + CAS Microsoft Federation Gateway Active Directory Synchronization

5 Hybrid Deployment Types Exchange 2010 Based Hybrid Deployment : Exchange 2010-based hybrid deployments can either be on-premises organizations that are homogenous Exchange 2010 organizations, or Exchange 2003 and Exchange 2007 on-premises organizations that have added Exchange 2010 servers as part of configuring a hybrid deployment with Office 365 Exchange 2013 Based Hybrid Deployment All on-premises Exchange 2013 servers must have installed Cumulative Update 1 (CU1) or greater for Exchange 2013 to support hybrid functionality with Office 365.

6 SSO with Hybrid Deployments Exchange Online Archiving Policy Control Access Control Security Support for Strong Authentication

7 Hybrid with Certificates Active Directory Federation Services Exchange Services Autodiscover / Transport / OWA / Web Services Exchange Federation Third party certificate multiple server or each server Support for Strong Authentication

8 Hybrid Deployment Compatibility On-premises Exchange environment Exchange 2010-based hybrid with v14 tenant Exchange 2010-based hybrid with v15 tenant Exchange 2013-based hybrid with v15 tenant Exchange 2013 (CU1) Not Supported Not applicable Supported Exchange 2010 SP3 Supported Supported Supported Exchange 2010 SP2 Supported Not supported Not supported Exchange 2010 SP1 Supported Not supported Not supported Exchange 2007 SP3 RU10 Supported Supported Supported Exchange 2007 SP3 Supported Not supported Not supported Exchange 2003 SP2 Supported Supported Not supported

9 Hybrid Prerequisites Exchange 2010(SP2) CAS & HUB, if legacy free busy via PF then with MBX role too / Exchange 2013 CAS/HUB Office 365 Subscription (Enterprise) & SMTP domain to be registered MS Directory Tool Server Installed & Enabled on Office 365 Portal Adding Exchange online to EMC Publishing EWS & Autodiscover with public certificate to access on premise from Cloud AD Federation Services for SSO (Optional) Remote Connectivity Analyzer will be of great help to check webservices

10 Hybrid Improvements

11 Hybrid Deployment Process Sign up for Office 365 Register domains with Office 365 Deploy Office 365 Directory Sync Install Exchange 2010 (HUB / CAS)/2013 CAS & MBX Servers (Edge opt) Publish the CAS Server (Assign SSL certificate, firewall rules) Run the Hybrid Wizard

12 Hybrid 2010 Hybrid Configuration Wizard DEMO

13 Exchange 2010 Hybrid Support Exchange 2010 SP3 will be compatible with current and new O365 tenants Exchange 2013 based hybrid is recommended for all new deployments (unless migrating from Exchange 2003)

14 Hybrid End User Experience Multiple Identity Options DirSync / ADFS / Cloud only User s Current Outlook Profile is updated with the Exchange online server name via Autodiscover Offline Files(OST Files) do not have to be recreated

15 Hybrid Configuration Engine Step 2 The Hybrid Configuration Engine reads the desired state stored on the HybridConfiguration Active Directory object. Step 3 The Hybrid Configuration Engine connects via Remote PowerShell to both the on-premises and Exchange Online organizations. Step 4 The Hybrid Configuration Engine discovers topology data and current configuration from the on-premises Exchange organization and the Exchange Online organization. Step 5 Based on the desired state, topology data, and current configuration, across both the on-premises Exchange and Exchange Online organizations, the Hybrid Configuration Engine establishes the difference and then executes configuration tasks to establish the desired state. EXCHANGE ONLINE ORGANIZATION ON-PREMISES EXCHANGE ORGANIZATION Exchange Server Level Configuration Domain Level Configuration Objects Organization Level Configuration Objects (Mailbox Replication Service Proxy, Certificate Validation, Exchange Web Service Virtual Directory Validation, & Receive Connector) (Accepted Domains, Remote Domains, & Address Policies) (Exchange Federation Trust, Organization Relationship, Availability Address Space, & Send Connector) 2 4 REMOTE POWERSHELL 5 INTERNET Step 1 The Update-HybridConfiguration cmdlet triggers the Hybrid Configuration Engine to start. Organization Level Configuration Objects (Exchange Federation Trust, Organization Relationship, Forefront Inbound Connector, & Forefront Outbound Connector) 5 Hybrid Configuration Object REMOTE POWERSHELL 1 Exchange Management Tools 4 Hybrid Configuration Engine Domain Level Configuration Objects (Accepted Domains & Remote Domains)

16 Exchange Hybrid Mail Flow Third Party Security System External recipient Secure Mail Diana On-premises mailbox Exchange Encrypted & authenticated mail flow Charles Cloud mailbox

17 IMAP migration Cutover migration Staged migration Hybrid Exchange 5.5 X Exchange 2000 X Exchange 2003 X X X X Exchange 2007 X X X X Exchange 2010 X X X Notes/Domino X GroupWise X Other X

18 Questions?