For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JG's avatar
JG
Icon for Cumulonimbus rankCumulonimbus
Jan 24, 2017

I see. Our deployment here is to allow all through (per business request). So I don't see the bit about APM's group membership checking in our configurations.

Going through the code of the iapp myself though, I can see that "/ecp/default.aspx" is the landing page. I can't find a string match of "ExchClientVer" anywhere.

I also see this:

"Because you are deploying the BIG-IP APM, you can restrict Exchange Administration Center (EAC) access to members of Exchange 2013's Organizational Management group. The BIG-IP APM module queries Active Directory group membership and the BIG-IP APM policy allows or denies access based on membership."

 

Anyway, there seems to be 2 things here: 1) The APM acl function does not work (not matching a certain string); and 2) it seems pointless to have this function from your perspective.

So what do we want to do?