Forum Discussion

refra_151287's avatar
refra_151287
Icon for Cirrus rankCirrus
Aug 02, 2016

ASM Policy Template for OWA Exchange with Active Sync 2010

Hi, We face a lot of False positives attackes, in te emails body, attachments,... I'm at version 11.5.4 and using OWA Exchange 2010 template, So the question, is there any template for both OWA and...
ASM Advanced WAF
exchange 2010
security
swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Sep 10, 2016

I always experience the same issue when I deploy ASM for OWA 2010 / 2013. Especially for Active-sync.

 

Anyone has observed the same as a common issue?

 

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Sep 11, 2016

    how did you deploy ASM on? the build in templates, external ones, just with policy building?

     

  • swo0sh_gt_13163's avatar
    swo0sh_gt_13163
    Icon for Altostratus rankAltostratus
    Sep 12, 2016

    I have tried with "Rapid Policy deployment" and one in-house developed ASM template. Result was same for both of the deployments.

     

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Sep 14, 2016

    was that in-house template build for OWA or general?

     

    active-sync is a weird kind of traffic which isn't fully HTTP, from a recent case F5 support advised us to ignore everything that goes over the /active-sync URI and has the Content-Type: application/vnd.ms-sync.wbxml header

     

  • swo0sh_gt_13163's avatar
    swo0sh_gt_13163
    Icon for Altostratus rankAltostratus
    Sep 17, 2016

    It is in-house developed ASM template. And is being used for the general web application, including OWA. Your comment looks quite promising, i.e. "active-sync is a weird kind of traffic which isn't fully HTTP, from a recent case F5 support advised us to ignore everything that goes over the /active-sync URI and has the Content-Type: application/vnd.ms-sync.wbxml header"

     

    I will try this out and let you know. Thanks a bunch!!!