Forum Discussion
Joshua_Bines_12
Cirrus
Jan 23, 2017EAC Restrict Access does not work for Exchange 2016 via iApp
URL: */ecp/?ExchClientVer=15
does not match
URI Check: /ecp/default.aspx
My testing shows that this allows external access for Admins.
Joshua_Bines_12
Cirrus
Mar 07, 2017
priority 899
when HTTP_REQUEST {
Bar admin access:
if { [string tolower [HTTP::uri]] starts_with "/ecp/?exch" } {
Bar access from everybody:
if { [HTTP::uri] starts_with "/ecp" } {
HTTP::respond 403 content {
External ECP Access Disabled
External Exchange Control Pannel (ECP)
We are sorry, for security reasons external ECP access is disabled.
To return click
} "Content-Type" "text/html" Connection close
}
}
- JGMar 07, 2017
Cumulonimbus
Well, you may well add the "string tolower" bit, but I should think such a URL ought to be case-sensitive. I never tested it though.
- Joshua_Bines_12Mar 07, 2017
Cirrus
Thanks for the reply. From our testing, it showed that if you used "ecp/?exchclientver=15" or "ECP/?ExchClientVer=15" the irule would not match and grant users access.
Once all our mailboxes have been migrated to exchange 2016 we will bar all external users to the ecp directory
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects