EAC Restrict Access does not work for Exchange 2016 via iApp

I see. Our deployment here is to allow all through (per business request). So I don't see the bit about APM's group membership checking in our configurations.

Going through the code of the iapp myself though, I can see that "/ecp/default.aspx" is the landing page. I can't find a string match of "ExchClientVer" anywhere.

I also see this:

"Because you are deploying the BIG-IP APM, you can restrict Exchange Administration Center (EAC) access to members of Exchange 2013's Organizational Management group. The BIG-IP APM module queries Active Directory group membership and the BIG-IP APM policy allows or denies access based on membership."

Anyway, there seems to be 2 things here: 1) The APM acl function does not work (not matching a certain string); and 2) it seems pointless to have this function from your perspective.

So what do we want to do?