Forum Discussion
Firewater_29708
Nimbostratus
NimbostratusBlocking iOS 6.1 Devices on Exchange 2010
This is more informative, the last few hours we started experenceing issues with Apple iOS 6.1, essentially malformed meetings on a device cause the device to get into a sync loop which causes excess...
Jan_Rockstedt_4Nimbostratus
NimbostratusHi Steve,
I can skip the event disable all.
No I would like to check the Apple version first and then MeetingResponse, but you right regex maybye not the best tool for match.
The log is good to have for troubleshooting, but the level could be less.
This is what I use right now, but I need to allow 1002.146 and block between 1002.140 > 1002.145
Any sugestion to solve it?
priority 100
when HTTP_REQUEST {
if {[string match -nocase "apple*1002*" [HTTP::header "User-Agent"]] and [HTTP::uri] contains "Cmd=MeetingResponse" } {
log local0. "Denied iOS 6.1.x src=[IP::client_addr] src_port=[TCP::client_port], dst=[IP::local_addr] dst_port=[TCP::local_port], virtual=[virtual name]"
reject
event disable all
}
}
Jan
