This document addresses the following use cases:
- Email+ uses AppTunnel to tunnel EWS traffic to the Exchange server. This setup only supports basic authentication to the EWS service.
- Email+ uses Tunnel to tunnel all traffic to the Exchange server. This setup supports basic, NTLM, modern auth, and identity certificates to authenticate to the EWS service.
If your existing Email+ deployment uses a Standalone Sentry for ActiveSync and your Exchange Web Service (EWS) is set up to use certificates, you have to disable ActiveSync on Standalone Sentry and set up Tunnel.