For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

spalande's avatar
spalande
Icon for Nacreous rankNacreous
Dec 07, 2014

mobile outlook access

We have virtual server for mobile outlook access. We have a security issue where users with active sync disabled are able to configure and download mails. How to block it on F5. Any thoughts/suggesti...
Chase_Abbott's avatar
Chase_Abbott
Icon for Admin rankAdmin
Jan 06, 2015

If ActiveSync is disabled for a user then APM/LTM wouldn't matter, the user would authenticate to the CAS server, then their CAS Mailbox would inform their device it's not allowed as a feature. Are you stating they're still able to use OWA instead of ActiveSync?

 

It's hard to block device specifics prior to activation because the entire auth process happens before this information is obtained by Exchange.

 

How are they configuring the mobile device to download mail if Async is disabled? IMAP, OWA, and other client protocols would still be allowed unless also disabled.