M451_315544
Cirrus
Apr 04, 2018Block Active-Sync on Virtual Server
Currently we have updated the iRule that was created via a template (probably through iApps at some point) with this code.
switch -glob -- [string tolower [HTTP::path]] {
"/microsoft-server-activesync*" {
drop
}
This seemed to work at first but we noticed that if the user appends a "/" character to the end of the server address it lets them right in.
So "myemailserver.com" gets blocked by the iRule. but "myemailserver.com/" is allowed.
Any suggestions?
I was able to resolve this using this updated iRule.
when HTTP_REQUEST { if { [string tolower [HTTP::uri]] contains "/microsoft-server-activesync" } { drop } }