Editing Category:XTRANET (section)

==Training on Xtranet Project KT. Dated 17 May 2024 - Tetra Support Staff - Alok Singh==

{{#ev:youtube|wgrp1MqsdFE|640}}

'''Video summary:''' Another architecture session for the same MPSDC/XTRANET Zimbra deployment covered elsewhere on the wiki (see the "MPSDC (XTRANET)" page), this one focused on mail flow and network segmentation rather than the OS/version upgrade. Inbound mail lands first on Trend Micro IMSVA (email security/AV scanning) before reaching the two active-active MTA nodes, then the mailbox pair (active-passive cluster, shared storage) and archive server. A load balancer sits in front of the MTA pair for webmail access so a single MTA failure is transparent to users. User authentication is via Active Directory (AD account required for every Zimbra login, integrated directly rather than Zimbra's own local auth). The distinct content here is the network design: servers are split across an Internet-facing zone, a DMZ zone (MTA + Trend Micro, firewalled), and a protected "MZ" zone (mailbox, archive), with a full list of ports that had to be explicitly requested from the client's separate network team to open between zones (389 for LDAP auth, 22, 53/DNS, 514/syslog, plus the standard Zimbra service ports). Also covers connecting to the client's data center via Array Networks' "Motion Pro" VPN client.