Outlook access from external network

Question

We have Office365 on gov cloud. 

Our ADFS and Active directory is on-premise and O365 authenticates via ADFS server.

We want to prevent users on external network to configure their desktops with outlook, thunderbird, eudora and MacOS mail clients. They should only be allowed to use OWA on their desktop and ActiveSync on tablets, iphone and Androids. 

How can i accomplish this? Can this only happen via adfs claim rules?

Also, what is a secure and inexpensive solution for accessing mail on mobile devices?

thanks

Answer 1

Hi Navgup,

Thanks for the updates.

Based on my search, it might cannot be combined. You can ask the question in our ADFS Forum to comfirm that.

Regarding the mobile recommendation, as we do not provide support for it, we welcome any community member who has the same experience to share in this thread. Thanks for your understanding.

Regards,

Robert

Answer 2

Does that mean only one of those 4 scenarios can be done? Can i combine scenarios #2 & #3 (you listed) to meet my requirements?

If that is not possible, then i think i would disregard #2, apply scenario #3  and then look for a different solution for mobile devices to access email? for eg xenmobile, airwatch or something that could function like activesync.

Answer 3

Hi Navgup,

Your requirements cannot be done. Only the following scenarios can be done in Office 365:

Block all external access to Office 365

Block all external access to Office 365, except Exchange ActiveSync

Block all external access to Office 365, except for browser-based applications such as Outlook Web Access or SharePoint Online

Block all external access to Office 365 for members of designated Active Directory groups

For your reference: https://technet.microsoft.com/en-us/library/hh526961(v=ws.10).aspx

Regarding "what is a secure and inexpensive solution for accessing mail on mobile devices?", can you tell us what kind of solution you want to accomplish?

Regards,

Robert