Encrypted MAPI Traffic Optimization Outlook 2010 mail

[Natalie Ramirez]

I am running version 5.0.1

My company has recently started deploying Office 2010 with Outlook 2010.  In troubleshooting slow performance in one of my locations, I found that traffic from the mail server was overloading the circuit.  On the WAAS, I have close to 100 connections going the mail server on the same port that MAPI traffic uses, but it is not getting the Mapi acceleration that shows TMDL.  It just shows TG (general).  Only 6 connections show as TMDL and those are the 6 clients that have not yet been updated to 2010.

In 5.0.1, inside the GUI, from the main page:

Device Groups --> AllWAASGroup --> Configure --> Enabled Features

Under MAPI Accelerator: is a sub group:

         Encrypted MAPI Traffic Optimization:

With a simple check box next to it.  Has anyone enabled this feature and were there any issues in enabling it?

[Natalie Ramirez]

Well, nothing like diving in head first to see what happens...  I checked the check box.  Did a "show stat conn" monitoring a specific connection.  I had the remote user close and open outlook multiple times, each time, the connection came up with only TG and 0.00%.  Back on the CM GUI, I noticed a "minor error" it says:

Description: error_encryption_service, SR_ERROR, exchangeMDB/servername.domainname.com

Details:

Encryption Services failed to retrieve secrets.

Action:

Generic error from Encryption Services Secret Retriever.

Thankfully, it did not stop all email traffic, but I am no closer to resolving this issue.  I did find a similar error in the configuration/guide/monitor page below.  But fairly useless in regards to how to resolve the issue.

http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v501/configuration/guide/monitor.html#wp1495558

Any assistance here would be greatly appreciated.

[Daniel Laden]

I believe this feature is still in extended beta.  You will not want to use this feature without your Partner/Acount team engagement.  Your account team can give you more details on WAAS Encrypted Mapi.

Thank You,

Dan Laden

PDI Helpdesk

http://www.cisco.com/go/pdihelpdesk

[Natalie Ramirez]

We decided to remove the check box in outlook for encrypted email.  As soon as you remove this check box, the mail pops up with TMDL acceleration. 

In outlook 2010:

File --> Account Settings --> Account Settings --> Change --> More Settings --> Security tab

First check box will be checked by default, "Encrypt data between Microsoft Outlook and Microsoft Exchange"

Just remove that checkbox.

Does this data really need to be encrypted anyway?  Maybe on a case by case basis, but definitely not for every single user in the company...