Forum Discussion

adambaack_13393's avatar
adambaack_13393
Icon for Nimbostratus rankNimbostratus
May 30, 2016

Exchange 2013 iApp - Block Activesync except from one IP

Have only used the iApp templates with their defaults in the past but now I'm needing to allow only one IP to ActiveSync to it. We are using MobileIron for mobile devices and I want to only allow Mob...
active sync
application delivery
BIG-IP
exchange
iapp
irule
LTM
mobileiron
  • Yann_Desmarest_'s avatar
    Yann_Desmarest_
    May 31, 2016

    Hi,

    You are right, find a corrected irule below :

    when HTTP_REQUEST {
    if { [string tolower [HTTP::path]] eq "/microsoft-server-activesync" and !([IP::client_addr] eq "x.x.x.x") } {
    drop
    }
   }
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
May 30, 2016

Hi,

You have an option in the VS to specify allowed source addr. You can also define an irule :

when HTTP_REQUEST {
    if { !([IP::client_addr] eq "x.x.x.x") } {
    drop
    }
   }
  • adambaack_13393's avatar
    adambaack_13393
    Icon for Nimbostratus rankNimbostratus
    May 31, 2016
    Would that not restrict all applications (OWA, OA, AS)? I just want ActiveSync restrict to the MobileIron IP Address. All other applications (OWA, OA) need to be unrestricted to the outside.