1. Background
To improve data security and protect against risks such as account hijacking and unauthorized login, Alibaba Mail Free Edition has upgraded its Security Management features. This upgrade simplifies configuration, strengthens login controls, and provides a unified and efficient security framework for your organization.
2. Key changes
This upgrade focuses on the Account Security module:
2.1 Feature consolidation
The legacy "Login Security for Proprietary Clients" and "Set Secure Login IP" features have been consolidated into a unified module: Access Policy.
Alibaba Mail Free Edition does not support IP range settings in policy rules.
2.2 Feature overview
A policy applies only to the selected client type, so security rules affect only those specified clients. These clients include Alibaba Mail's proprietary desktop and mobile clients, the Alibaba Mail web client, DingTalk for PC and mobile, the Alibaba Mail Outlook Plug-in, and other third-party clients. This approach allows legitimate access while blocking high-risk or unauthorized login attempts.
2.3 Benefits
Unified management: You no longer need to configure settings in two separate locations. You can now manage allowed clients from a single interface.
Simplified configuration: The process is streamlined for administrators, reducing the number of steps and lowering the risk of security vulnerabilities caused by configuration oversights.
3. Procedure
Log in to the Alibaba Mail admin console.
In the left navigation bar, select Security Management > Account Security > Access Policy.
Create an access policy. For detailed instructions, see Access Policy.