Forum Discussion

M451_315544's avatar
M451_315544
Icon for Cirrus rankCirrus
Apr 04, 2018

Block Active-Sync on Virtual Server

Currently we have updated the iRule that was created via a template (probably through iApps at some point) with this code.   switch -glob -- [string tolower [HTTP::path]] { "/microsoft...
application delivery
iRules
LTM
  • M451_315544's avatar
    M451_315544
    Apr 05, 2018

    I was able to resolve this using this updated iRule.

    when HTTP_REQUEST {
    if { [string tolower [HTTP::uri]] contains "/microsoft-server-activesync"  } {
    drop
    }
   }
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Apr 04, 2018

Hello,

Can you tell me how you test your AS service from outside? As a reminder, this irule allows to pool several services...

you can not access the AS service without the URI that starts with /microsoft-server-activesync*.

So if you test your service from outside with a browser, you don't test AS if you enter just: https://myemailserver.com and https://myemailserver.com

You will fallback in this condition:

    default {
         This final section takes all traffic that has not otherwise
         been accounted for and sends it to the pool for Outlook Web App
        if { [HTTP::header exists "APM_session"] }  {
            persist uie [HTTP::header "APM_session"] 7200
        } else {
            persist source_addr
        }
        pool email.REDACTED_owa_pool           
    }

For information, AS is used trough AS client (in mobile device) and this service use a specific UserAgent and URI...

Tell me how I can help you.

Regards,