iRule to restrict activesync traffic to particular IPs but allow all other Exchange traffic

Hi Monty,

the Rule has a little problem with the tolower formating, but in general it would work. When formating a string to lower the compare string has to be lower case too, otherwise it won't match.

when HTTP_REQUEST {
        log local0. "Client IP: [IP::client_addr]"
        log local0. "URI: [HTTP::uri]"
        if {string tolower [HTTP::uri] contains "/microsoft-server-activesync*" and not ([class match [IP::client_addr] equals Airwatch_SEG_Servers]) } then {
            log local0. "dropped connection"
            reject 
        } else {
            pool EXCHANGE_2013_https_int_pool
        }
}

Cheers, Kai