For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Firewater_29708's avatar
Firewater_29708
Icon for Nimbostratus rankNimbostratus
Feb 07, 2013

Blocking iOS 6.1 Devices on Exchange 2010

This is more informative, the last few hours we started experenceing issues with Apple iOS 6.1, essentially malformed meetings on a device cause the device to get into a sync loop which causes excess...
application delivery
dev
devops
iRules
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Feb 22, 2013
If you find it we can use something like this (untested); 


when HTTP_REQUEST {
set collectdata 0
 switch -glob [string tolower [HTTP::header User-Agent]] {
  "*1002.14[0-5]*" {
   if { [HTTP::uri] contains "Cmd=MeetingResponse" } {
    set collectdata 1
    HTTP::collect 0 0
   }
  }
 }
}

when HTTP_REQUEST_DATA {
 if { $collectdata = 1 } {
  scan [HTTP::payload] {%*s login %s} username
  reject
  log local0. "Denied iOS 6.1 Device SNAT src=[IP::client_addr] , virtual=[virtual name], user=$username"
  HTTP::release
  return
 }
}