Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Igor430's avatar
Igor430
Icon for Altostratus rankAltostratus
Nov 24, 2016

Blocking Exchange 2010 ECP while allowing OWA

Using Big IP 12.1.1, I have OWA+Activesync enabled through the exchange iApp and I'd like to block /ECP. Currently when I login to owa I can simply type "/ecp" instead of /owa in the URL and it comes...
BIG-IP Access Policy Manager (APM)
ecp
exchange 2010
LTM
owa
security
Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Nov 27, 2016

This should work:

when HTTP_REQUEST {
    if { [string tolower [HTTP::uri]] starts_with "/ecp" } {
    reject
    }
}