For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mike_Maher's avatar
Mike_Maher
Icon for Nimbostratus rankNimbostratus
Oct 12, 2011

ASM Policy for Active Sync 2010

We are currently migrating from Active Sync 2003 to 2010 and we are running traffic through an ASM version 10.2.0 HF2. The issue we are seeing is that the in 2010 apparently they have gone to doing s...
app sec
BIG-IP Access Policy Manager (APM)
security
BT_90520's avatar
BT_90520
Icon for Nimbostratus rankNimbostratus
Oct 16, 2011
looks like we can have some iRule to decode it but not ideal for each request and eat up performance too?

 

@ http://devcentral.f5.com/wiki/iRules.b64decode.ashx

 

 

I also saw below sentences for renegotiation and "MAY" means we can use back w/o encoding but this may need some rewriting in server responses. But then again, I am not totally sure if there are other implication since there can be other sync object involved. See http://msdn.microsoft.com/en-us/library/cc425499(v=EXCHG.80).aspx

 

 

@ http://msdn.microsoft.com/en-us/library/ee238027(v=EXCHG.80).aspx

 

"In addition to the HTTP POST request/response commands, the HTTP OPTIONS command response provides the supported ActiveSync capabilities of the server, including supported protocol versions and commands."

 

 

@ http://msdn.microsoft.com/en-us/library/ee157438(v=EXCHG.80).aspx

 

"Messages are transported by using HTTPPOST and HTTP OPTIONS, as specified in [RFC2616]. The query parameters in the request URI MAY be encoded with base64 encoding (see section 2.2.1.1.1.1). "