Symantec IM Manager and AOL SSL
The latest Symantec IM Manager includes support for AIM 6.8. This is kind of a big change because previously there was no way to support AIM clients that required SSL logins.
AIM has provided a method whereby we register our domain names with AOL, so when the AIM 6.8 client attempts to log in, AOL directs the client to our internal IM Manager server. As part of setting this up I purchased a SSL cert for my IM Manager server. The client connects using our certificate, therefor the IM Manager server is still able to apply security and perform logging as appropriate.
This support is not retroactive to AIM Pro clients. In fact, I'm told that although this was originally designed for AIM 6.5 as well, AOL made some changes that aced out that client.
I'm not sure I trust AOL not to make major changes again and leave AIM 6.8 installs in the cold. But it is better than being stuck with incredibly old versions of AIM.
Is there an ethical and legal issue here as well? While users are advised that this is our network and our computers, might they argue that they have a reasonable expectation of privacy since AIM is using SSL?
Categories
General0 TrackBacks
Listed below are links to blogs that reference this entry: Symantec IM Manager and AOL SSL.
TrackBack URL for this entry: http://www.infosecblog.org/mt-tb20071121.pl/749
1 Comments
Leave a comment
Powered by Ajax Comments
"While users are advised that this is our network and our computers, might they argue that they have a reasonable expectation of privacy since AIM is using SSL?"
As long as the users are made aware of any responsible/appropriate use of computing resources policy (which specifies monitoring), then they should not expect any privacy while chatting.