Annex D Messaging Systems Lesson
Annex D Messaging Systems Lesson
Annex D
DS.04.01
Messaging Systems and Services
Student Outline
Data Systems Administrator Course
M09CVQ1
Date of Revision: 20211210
Table of Contents
Terminal Learning Objective ....................................................................................................... 3
Enabling Learning Objectives ...................................................................................................... 3
Different types of Messaging Solutions .................................................................................. 5
MX Records ............................................................................................................................... 16
Reverse DNS .............................................................................................................................. 17
Service Location (SRV)............................................................................................................... 17
Autodiscover DNS Record ......................................................................................................... 17
Data Availability Groups (DAG’s) ......................................................................................... 17
Page 2 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
*This is the GUI portion of administering Exchange, rather than use Exchange Management
Shell. .......................................................................................................................................... 20
Messaging Server Client Applications................................................................................... 21
1. Without the aid of reference, identify in writing the different types of messaging
solutions, in accordance with 0671-IMPL-1003
Page 3 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
3. Without the aid of reference, identify in writing the unified messaging concepts, in
accordance with 0671-IMPL-1003
5. Without the aid of reference, identify in writing the messaging server software
requirements, in accordance with 0671-IMPL-1003
7. Without the aid of reference, identify in writing the high-availability solutions for
messaging servers, in accordance with 0671-IMPL-1003
10. Without the aid of reference, identify in writing the characteristics of messaging
clients, in accordance with 0671-IMPL-1003
Page 4 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Messaging enables software applications to connect and scale by separating the sending and
receiving of data. There are several important concepts to understand:
Channels (or queues) are logical pathways that connect the programs and convey
messages.
Send and forget. The sending application sends the message to the message channel
(queue). Once that step is complete, the sender can move onto other work while the
messaging system transmits the message in the background. The sender does not have
to wait for the consumer to receive and process the message. There are ways to be
notified once your intended recipient receives the message. “Read receipts”
Store and forward. The messaging system stores the message, either in memory or on
disk, and delivers the message to the receiver’s computer.
Page 5 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Variable timing. With synchronous communication, the caller must wait for the receiver
to finish processing the call before the caller can receive the result and continue. This
means that the caller can only make calls as fast as the receiver can perform them.
Conversely, asynchronous communication allows the sender to batch requests to the
receiver at its own pace and for the receiver to consume the requests at its own
different pace.
Page 6 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
XMPP is the Extensible Messaging and Presence Protocol, a set of open technologies for instant
messaging, presence, multi-party chat, voice and video calls, collaboration, lightweight
middleware, content syndication, and generalized routing of XML data.
Open — the XMPP protocols are free, open, public, and easily understandable; in
addition, multiple implementations exist in the form of clients, servers, server
components, and code libraries.
Standard — the Internet Engineering Task Force (IETF) has formalized the core XML
streaming protocols as an approved instant messaging and presence technology. The
XMPP specifications were published as RFC 3920 and RFC 3921 in 2004, and the XMPP
Standards Foundation continues to publish many XMPP Extension Protocols.
Proven — the first XMPP technologies were developed in 1998 and are now quite
stable; hundreds of developers are working on these technologies, there are tens of
thousands of XMPP servers running on the Internet today, and millions of people use
XMPP for instant messaging through public services such as Google Talk and XMPP
deployments at organizations worldwide.
Secure — any XMPP server may be isolated from the public network (e.g., on a company
intranet) and robust security using SASL and TLS has been built into the core XMPP
specifications.
Diverse — a wide range of companies and open-source projects use XMPP to build and
deploy real-time applications and services
Page 7 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Cisco Jabber combines presence information, instant messaging, voice and video
communication, web conferencing and desktop sharing into a unified overall experience across
mobile and stationary devices. Cisco Jabber is available for PC and Mac, as well as for tablets
and smartphones. The key benefit of Jabber is that it is installed on premise therefore, if the
link to the cloud goes down, it has no affect to users on the network. Jabber is currently being
utilized by both I/IIMEF on their resident tactical networks.
Current features of Jabber available:
Instant Messaging (IM) - Allows users to communicate instantly with people on their
computers, mobile devices (notebooks and tablets) or smart phones.
Rich presence - This allows users to see if a contact is available via Jabber, on the phone
or in a meeting.
Desk phone integration - Dial phone numbers via jabber client or dial phone numbers
from within outlook or Jabber client.
Integrated directory – Jabber has the ability to be linked with Active Directory giving
users the ability to search for other people online.
Soft-phone - Allows users to use their computer as a phone. Their computer would act
as if it were an extra phone connected to their extension. This might be useful when
there are not enough physical phones for every user on the network.
Visual voicemail - Bring up user voicemail messages if enabled, they can see who called
them, and listen to the messages.
Video Conferencing - Video phone integrated with CDU video conferencing systems
(compatible to all standards based video conferencing systems anywhere on the
internet)
Desktop sharing - Allow users to see what other users are seeing on their computer and
allow them to interact with what they are seeing. This is extremely useful for
Commanders when wanting to share information with other Commanders.
Collaborate with other organizations - Most features extend to other institutions who
also have Cisco Jabber installed. A good example is when I MEF was able to collaborate
with both 1 MARDIV and MSTP.
Page 8 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Multiple Clients Available - Clients for PC, Mac, iOS, Android. (Note: not not all features
are available on all clients)
2. Openfire
Openfire is a real time collaboration (RTC) server licensed under the Open Source Apache
License. It uses the only widely adopted open protocol for instant messaging, XMPP Openfire is
incredibly easy to setup and administer, but offers rock-solid security and performance.
Openfire it typically used in smaller networks where the amount of users is low however
communication it still vital. Openfire typically resides on the Marine Corps Classified Networks.
Page 9 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Internet Relay Chat (IRC) is a text-based chat (instant messaging) system. It enables discussions
among any number of participants in so-called conversation channels, as well as discussions
between only two partners — for example, in question-and-answer dialogues. Any participant
may open a new conversation channel, and a single computer user can also take part in several
such simultaneous channels.
IRC channels allow real-time discussions among a large number of people at a time.
IRC chats can be logged if required which allows users to look at those logs in the future.
There is no centralized control over IRC. Hence, any Marine can set up his/her own
server and use it for their network.
IRC has many access levels and complex channel modes. So, there is scope for privacy in
form of restrictions in IRC. For example, few channels may need username/password to
access, etc.
1. Mako
MAKO supports requirements for low-bandwidth operations, making it ideal for in-theater
submarines, airplanes and moving vehicles. MAKO servers are connected in a global federation,
enabling server and clients to automatically reconnect with full chat history availability.
There is web-based user administration across the federation simplifying administrative
support of a distributed, federated server infrastructure. IRC does not seamlessly capture a
record of war logging, while MAKO implements full requirements for recording war logging.
Page 10 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
2. mIRC
mIRC is a full featured Internet Relay Chat client for Windows that can be used to
communicate, share, play or work with others on IRC networks around the world, either in
multi-user group conferences or in one-to-one private discussions.
It has a clean, practical interface that is highly configurable and supports features such as
buddy lists, file transfers, multi-server connections, IPv6, SSL encryption, proxy support, UTF-8
display, UPnP, customizable sounds, spoken messages, tray notifications, message logging, and
more.
mIRC also has a powerful scripting language that can be used both to automate mIRC and to
create applications that perform a wide range of functions from network communications to
playing games.
*mIRC is a bit older however it was once used on USMC networks. Is it still used today? No but
it could be an option.
POR’s are systems that come with pre-configured settings that are not allowed to be
modified. They are to be deployed on any network and support any unit at any time. The unit
responsible for providing support is called Marine Corps Tactical Systems Support Activity
(MCTSSA).
MCTSSA conducts testing, evaluation, engineering, and provides direct technical support to the
Fleet Marine Forces for Marine Corps and Joint Service command, control, computer,
communications, intelligence (C4I) systems and expeditionary combat vehicle systems in order
to inform acquisition decisions to make Marines more capable.
They provide the only Marine Corps organic, operationally relevant, MAGTF Command, Control,
Communications, Computers, and Intelligence (C4I) architecture for enterprise-level testing,
engineering, analysis, troubleshooting, and solutions. This environment directly supports
investment decisions for the Objective Network by establishing a rigorous and repeatable
process to evaluate proposed changes and cyber vulnerabilities from the tactical edge and
throughout the Marine Corps Enterprise Network. MCTSSA enables Joint Communications
Exercises, Joint Interoperability Testing, Tactical Cloud Implementation, Cyber Developmental
Testing, Naval Integration, tactical networking/voice, and System of Systems testing. This
environment is also the sole solution in the Marine Corps for Link-16 Tactical Data Link
Networks for air-to-air, ship, and shore targeting and messaging, validated at MCTSSA before
Marine/Navy use in theater.
*The Warfighter Support Division is the section that helps most 0671’s.
Page 11 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
The Warfighter Support Division (WSD) provides global command, control, computers,
communications and intelligence (C4I) systems support to the USMC, joint services, coalition
partners, and other U.S. government agencies. We do this in order to ensure the warfighter can
quickly, efficiently and intelligently operate their respective systems in the full scale of military
operations.
Some examples of POR’s include: Some of these POR’s have chat solutions that
0671’s need to be familiar with to support other organizations.
The primary system for coordinating and executing the air campaign. It links the command and
control systems for the United States Air Force, United States Navy, and United States Marine
Corps, and integrates with ground systems for the U.S. Army systems, enabling coordinated,
synchronized air battle management.
AFATDS supports weapon systems such as mortars, field artillery cannons, rockets, close air
support, attack helicopters, and Naval Surface Fire Support (NSFS) systems.
Developed for the U.S. Marines Corps, C2PC displays the Common Operational Picture (COP)
across multiple workstation and among multiple agencies.
It is a single digital display of relevant operational information shared by battalion and higher
leadership connected on the Global Combat and Control System Tactical Combat Operations
network. It combines seven tactical applications into one user interface.
The United States Marines Corps (USMC) Combat Data Network (CDN) Small Form Factor (SFF)
program integrates Commercial Off-The-Shelf (COTS) and Government Off-The-Shelf (GOTS)
software and hardware into deployable, modular, environmentally resilient, scalable suite of
computer network equipment.
Page 12 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Microsoft Exchange
What is Microsoft Exchange?
Microsoft Exchange relies on the use of an Exchange server — a computer on which individual
users' Exchange accounts are configured. An organization can maintain its own Exchange server
or rely on Microsoft to do that via the cloud using a Microsoft 365 account.
When administrators use a Microsoft Exchange account, email messages — along with calendar
information and other Outlook details — are generally kept in sync between their Outlook
client on a computer or mobile device and the Exchange server. This most often happens using
a technology called Exchange ActiveSync. ActiveSync keeps all the Exchange data synchronized
between devices, so when email is replied to, deleted, or moved on their computer, for
example, that change is immediately made on the Exchange server as well, and then
synchronized with any other devices users might use, such as Outlook on a mobile device.
Page 13 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
ActiveSync isn't the only option, though; an organization can choose to manage its email using
IMAP or POP as well. IMAP is very similar to ActiveSync in that it keeps email messages in sync
between the Exchange server and clients, though POP works differently — it downloads email
from the Exchange server to a single computer and does not keep the two devices in sync. It's
not commonly used for Exchange systems.
Exchange use a single building block architecture that provides email services for deployments
at all sizes, from small organizations to the largest multi-national corporations. This architecture
is describe in the following diagram.
Page 14 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Communication between Exchange servers and past and future versions of Exchange occurs at
the protocol layer. Cross-layer communication isn't allowed. This communication architecture is
summarized as "every server is an island". This architecture has the following benefits:
Version-aware communications.
Isolated failures.
Mailbox servers
Mailbox servers contain the transport services that are used to route mail.
Mailbox servers contain mailbox databases that process, render, and store data.
Mailbox servers contain the Client Access services that accept client connections for all
protocols. These frontend services are responsible for routing or proxying connections
to the corresponding backend services on a Mailbox server. Clients don't connect
directly to the backend services.
Administrators manage Mailbox servers by using the Exchange admin center (EAC) and
the Exchange Management Shell.
Edge Transport servers handle all external mail flow for the Exchange organization.
Edge Transport servers are typically installed in the perimeter network, and are
subscribed to the internal Exchange organization.
Edge Transport servers provide antispam and mail flow rules as mail enters and leaves
your Exchange organization.
Administrators can manage Edge Transport servers by using the Exchange Management
Shell.
Page 15 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Determine the user mailbox to deliver these messages to and route them accordingly
Determine the destination system to deliver these messages to and route them
accordingly
The host. This will be something along the lines of mail.example.com and will point to an
IP address.
The MX record itself. This points to a host. Pointing the MX record to an IP address is not
valid. While it will work in some cases, administrators will get failures.
However the name used on the host does play a part with the other DNS configurations
made.
The MX weight or priority indicates which server should be used first. The lowest number is
tried first. This is usually incremented in units of five. Five is the lowest, followed by ten, fifteen
etc. It is very rare to see the number one.
Page 16 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Reverse DNS
Reverse DNS is also important. In many cases the reverse DNS information is used to check that
the exchange server is who it says it is. The RDNS record (also known as PTR) is attached to the
IP address. As such, only one Reverse DNS per IP address.
The reverse DNS should ideally match the MX record, and what the server has on the SMTP
banner when connecting.
When a DAG is created, it's initially empty. When administrators add the first server to a DAG, a
failover cluster is automatically created for the DAG. In addition, the infrastructure that
monitors the servers for network or server failures is initiated. The failover cluster heartbeat
mechanism and cluster database are then used to track and manage information about the
DAG that can change quickly, such as database mount status, replication status, and last
mounted location.
Exchange administrators can choose to use DAGs in different geographic locations and in many
different architectural designs and configurations, making it considerably more flexible than
previous high-availability setups.
Page 17 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
The DAG replicates the mailbox databases between the mailbox servers. The more servers that
are included, the more copies can be shared throughout the DAG group. As typical for a cluster,
it also contains a heartbeat, cluster networks, and the cluster database.
The DAG group always has one active server. The rest are set on passive. That means,
depending on the structure that is setup:
The mailbox databases are spread across multiple DAG members --> that ensures that
no two servers have the same mix of databases.
The databases of the active server are replicated to the passive server --> direct copy of
the active server
The DAG replicates the data on a remote server --> also called site resilience, as it
guarantees a ‘remote copy’ of the data
Quorum is the idea that, in the event of a failure of some DAG members, there are rules to
govern what resources the remaining members can provide. These quorum rule sets exist to
provide consistent operation of a DAG and act as a tiebreaker in situations where DAG nodes
lose communication with each other.
When a DAG has an even number of nodes, it uses Node & File Share Majority quorum mode.
In this mode, an external witness server acts as the tiebreaker. When running in this mode,
each DAG node member gets a single vote, but the witness server gives one of the DAG nodes
an additional vote. The cluster quorum data is stored on each member's local system disk, but
the witness server has a separate file that points to one DAG member as the most updated
copy of the DAG cluster quorum data.
When a DAG has an odd number of members, it uses Node Majority quorum mode. In this
mode, each DAG member gets a vote, and each member's local system disk is used to store
cluster quorum data.
It is possible to manually assign specific DAG members with weighted quorum votes. Doing so is
not recommended in most circumstances and should only be done after direct consultation
with Microsoft support.
Page 18 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
The witness server must be in the same Active Directory forest as the DAG.
A single server can serve as a witness for multiple DAGs. However, each DAG requires its
own witness directory.
Cisco Jabber: Cisco Jabber supports a three-server cluster. Three operational servers are
required for full redundancy. Cisco Jabber will function properly with two operational servers in
the cluster; however, it is recommend to only run with two operational servers for short
periods of time, for example, when upgrading the servers in a Cisco Jabber cluster.
Mako: The Mako VPN Cloud SD-WAN solution from Mako Networks can be configured to
provide Fast Failover, a High Availability (HA) feature that enables real-time, automated failover
from one broadband network to another to take place without disrupting service delivery. This
means critical ogranizations systems stay online and do not drop a packet during unexpected
network outages. Already known for world-class security features, the seamless performance of
Fast Failover sets Mako apart from the competition. The likelihood of this concept being
deployed is slim to none however if needed the solution is identified.
Openfire Server: As of today, there is no use case where Openfire servers have deployed in HA
mode. If it were to be deployed in such a scenario, this would be over a distributed network
where users were separated.
Page 19 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
The Exchange Management Shell also provides a robust and flexible scripting platform. Visual
Basic scripts that required many lines of code can be replaced by Exchange Management Shell
commands that use as little as one line of code. The Exchange Management Shell provides this
flexibility because it uses an object model that's based on the Microsoft .NET Framework. This
object model enables Exchange cmdlets to apply the output from one command to subsequent
commands.
*During the lab portion, students will have the opportunity to utilize Exchange
Management Shell to see some of the capabilities.
*This is the GUI portion of administering Exchange, rather than use Exchange
Management Shell.
*The URL of the EAC is controlled by the Internet Information Services (IIS) virtual directory
named ECP in the Client Access (frontend) services on the Mailbox server. Yes, the virtual
directory is named ECP, not EAC.
Page 20 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Page 21 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Transverse Client
Transverse chat client is a communication tool that allows users to view others' availability
status and access instant messaging (IM), desktop sharing, and conferencing. It is used to
connect to an Openfire server. Transverse can be both Active Directory integrated or used for
local login capabilities.
Page 22 of 23
Data Systems Administrator Course M09CVQ1
DS.04.01 Messaging Systems and Services
Spark Client
Spark is an Open Source, cross-platform IM client optimized for businesses and organizations. It
features built-in support for group chat, telephony integration, and strong security. It also
offers a great end-user experience with features like in-line spell checking, group chat room
bookmarks, and tabbed conversations.
Page 23 of 23
Data Systems Administrator Course M09CVQ1