Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

refra_151287's avatar
refra_151287
Icon for Cirrus rankCirrus
Aug 02, 2016

ASM Policy Template for OWA Exchange with Active Sync 2010

Hi, We face a lot of False positives attackes, in te emails body, attachments,... I'm at version 11.5.4 and using OWA Exchange 2010 template, So the question, is there any template for both OWA and...
ASM Advanced WAF
exchange 2010
security
swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Sep 10, 2016

I always experience the same issue when I deploy ASM for OWA 2010 / 2013. Especially for Active-sync.

 

Anyone has observed the same as a common issue?

 

swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Sep 17, 2016

It is in-house developed ASM template. And is being used for the general web application, including OWA. Your comment looks quite promising, i.e. "active-sync is a weird kind of traffic which isn't fully HTTP, from a recent case F5 support advised us to ignore everything that goes over the /active-sync URI and has the Content-Type: application/vnd.ms-sync.wbxml header"

 

I will try this out and let you know. Thanks a bunch!!!