Forum Discussion

aalkhuja_160331's avatar
aalkhuja_160331
Icon for Cirrus rankCirrus
May 23, 2016

Deny OWA usernames through the ASM

Hi,   My customer asked me to deny some OWA usernames to access their mail through the ASM. Does any one have any idea how to find that filter.   Thank you   Ammar  
application delivery
ASM Advanced WAF
security
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
May 24, 2016

Hi,

You can use the following irule : 

wwhen HTTP_REQUEST {
    if { [class match [HTTP::username] $::denied_users] } {
       log local0. "User [HTTP::username] has been denied to access virtual server [virtual name]"
       HTTP::respond 401 WWW-Authenticate "Basic realm=\"Secured Area\""
    }
}

You need first to create a datagroup that contains all denied usernames "denied_users" and then create the above irule and assign it to your Virtual Server