Hello Zimbra Friends, Customers & Partners, Zimbra 9.0.0 Kepler Patch 30 and 8.8.15 James Prescott Joule Patch 37 are here. These patches include the following listed in their respective releases What’s New Security Fixes Fixed Issues Known Issues Please refer to the release notes for the patch installation on Red Hat and Ubuntu platforms. An […]
Setting up DNS before installing Zimbra
DNS is an important aspect of any Zimbra installation. This article will help those that are new on installing Zimbra to get an idea what needs to be configured to get started. There will also be some tips and best practices that will improve security and email deliverability that may be lesser know even to […]
Optimizing Zimbra security and TLS settings via a script (updated May 2024)
A partner has requested a script to implement the Security tips and TLS settings documented at https://wiki.zimbra.com/wiki/Cipher_suites and https://wiki.zimbra.com/wiki/Secopstips . At Zimbra we love scripts! This article shows a script that configures Zimbra with strong TLS and security settings. Prerequisites You have set up a correct hostname and DNS, to check, run the following as […]
Zimbra Referrer-Policy best practice
The “Referer” header is a HTTP header that is added by the web browser whenever a request is made. A Zimbra user who receives an email with links or images in the Zimbra web interface may unknowingly share information of the Zimbra server when clicking the link or viewing inline-images. For example when an email […]
Introducing Zimbra Microsoft Teams integration
Teams Power is an integration with Zimbra and Teams and is provided via Innovazionedigitale. With this integration customers using Outlook with a 365 subscription can use Teams from both the Zimbra calendar and Microsoft Outlook. The integration is available for Zimbra Classic and Modern UI on Zimbra 8 and above. More information on this Zimlet […]
Did you know? Zimbra HTTP Strict Transport Security (HSTS)
The HTTP Strict-Transport-Security response header (often abbreviated as HSTS) informs browsers that the site should only be accessed using HTTPS, and that any future attempts to access it using HTTP should automatically be converted to HTTPS. What does HSTS do for improving security? You have HSTS configured on Zimbra and have configured a correct TLS […]