Block Active-Sync on Virtual Server

Full iRule here.

when HTTP_REQUEST {


     Offline Address Book and Autodiscover do not require persistence.

    switch -glob -- [string tolower [HTTP::path]] {

         "/microsoft-server-activesync*" {
            drop
        } 
        "/microsoft-server-activesync*" {
            reject
        }

        "/owa*" {
             Outlook Web Access
            if { [HTTP::header exists "APM_session"] } {
                persist uie [HTTP::header "APM_session"] 7200
            } else {
                persist source_addr 255.255.255.255 3600
            }
            pool email.REDACTED_owa_pool
            return
        }

        "/ecp*" {
             Exchange Control Panel.
            if { [HTTP::header exists "APM_session"] } {
                persist uie [HTTP::header "APM_session"] 7200
            } else {
                persist source_addr 255.255.255.255 3600
            }
            pool email.REDACTED_owa_pool
            return
        }

        "/ews*" {
             Exchange Web Services. 
            if { [HTTP::header exists "APM_session"] } {
                persist uie [HTTP::header "APM_session"] 7200
            } else {
                persist source_addr
            }
            pool email.REDACTED_owa_pool
            COMPRESS::disable
            return
        }
        "/oab*" {
             Offline Address Book.
            pool email.REDACTED_owa_pool          
            return
        }

        "/rpc/rpcproxy.dll" {
         Outlook Anywhere.
            if { [HTTP::header exists "APM_session"] } {
                persist uie [HTTP::header "APM_session"] 7200
                } elseif { [string tolower [HTTP::header "Authorization"]] starts_with "basic" } {
                persist uie [HTTP::header "Authorization"] 7200
                } else {
                persist source_addr
                }
               
            pool oa_pool_name          
            COMPRESS::disable
            return
        }

        "/autodiscover*" {
             Autodiscover.
            pool email.REDACTED_autodiscover_pool            
            return
        }

        default {
             This final section takes all traffic that has not otherwise
             been accounted for and sends it to the pool for Outlook Web App
            if { [HTTP::header exists "APM_session"] }  {
                persist uie [HTTP::header "APM_session"] 7200
            } else {
                persist source_addr
            }
            pool email.REDACTED_owa_pool           
        }
   }
}

when HTTP_RESPONSE {
    if { [string tolower [HTTP::header values "WWW-Authenticate"]] contains "negotiate"} {
        ONECONNECT::reuse disable
        ONECONNECT::detach disable
         this command disables NTLM conn pool for connections where OneConnect has been disabled
        NTLM::disable
    }
     this command rechunks encoded responses
    if {[HTTP::header exists "Transfer-Encoding"]} {
        HTTP::payload rechunk
    }        
}