OWA , ActiveSync And RPC Over HTTP in ONE VS

This irule should work in v10 accept you will need to change PLUGIN::disable ASM and PLUGIN::enable ASM to ASM::enable and ASM:disable. Double check the wiki for the new syntax.

 

 

Another option is to create a second http class that contains /rpg and disables ASM. You can then apply that above the class for ASM.

My last post should have read /rpc, darn auto correct.

 

 

Also note that using the class would not check the http method so it is less specific and so possibly less secure.

Dear Brown,

 

 

Thank you for your kind reply .

 

 

Do you think the following irule syntax going to work on my case without changing any thing else .

 

 

rule irule_RPC {

 

when HTTP_CLASS_SELECTED {

 

PLUGIN::enable ASM

 

if { [HTTP::uri] contains "/rpc" } {

 

PLUGIN::disable ASM

 

}

 

}

That is pretty close. In v10 I would do something like this.(note the diffrence in the enable disable commands.)

 

 

when HTTP_CLASS_SELECTED {

 

if { [HTTP::uri] starts_with "/rpc" } {

 

ASM::disable

 

} else {

 

ASM::enable

 

}

 

}

Hi steve .

 

 

Thank you for your help .

 

 

i can't use this statment (if { [HTTP::uri] starts_with "/rpc" } { ) because i don't know how the request will reach F5 ,so csn i use the following instead :

 

 

when HTTP_CLASS_SELECTED {

 

if { $rpcdata == 1 }{

 

ASM::disable

 

} else {

 

ASM::enable

 

}

 

}

 

 

Thank You

 

No that will not work because $rpcdata is a variable so in you rule it will never b = 0 actually it is never defined. When you say you don't know how the request will reach the f5 are you concerned with case? If so just use string to lower like below. By the way if this is for outlook anywhere it will arrive starting wit /rpc as this is what the outlook client sends. Actually you could use eq "/rpc/rpcproxy.dll" as this is what it should always be.

 

 

when HTTP_CLASS_SELECTED {

 

if { [string tolower [HTTP::uri]] starts_with "/rpc" } {

 

ASM::disable

 

} else {

 

ASM::enable

 

}

 

}

We had a similar problem. Try this:

when HTTP_REQUEST {
set path [HTTP::path]
set method [HTTP::method]
}
when HTTP_CLASS_SELECTED {
if { ($path eq "/rpc/rpcproxy.dll") and (($method equals "RPC_IN_DATA") or ($method equals "RPC_OUT_DATA")) } {
PLUGIN::disable ASM
}
}

Dear michael,

 

 

1. BigIP version is 10.2.1 and it will not accept PLUGIN::disable ASM (i'll try with( ASM::Disable).

 

 

2. is this one or Two IRules .

 

 

waiting for you kind replay .

 

 

Thank You

 

We removed our OWA from behind the ASM after we upgraded from v9.4.3 to v10.2.0. I have not put it back behind the ASM, so that iRule is for v9.

 

 

I wasn't aware that the command for ASM was changed in the version upgrade. Thank you for pointing it out. I will make a note of it for when I re-implement this iRule.

 

 

This is actually one iRule. The path and method are set in the HTTP_REQUEST and then used as varuables in the HTTP_CLASS_SELECTED.

 

 

Let me know if this works for you.

Dear Steve and Michael,

 

 

I tried Steve's Irule which is :

 

 

when HTTP_CLASS_SELECTED {

 

if { [HTTP::uri] starts_with "/rpc" } {

 

ASM::disable

 

} else {

 

ASM::enable

 

}

 

}

 

 

and it works fine .

 

 

Thank you Steve and Michael for your help .

 

 

Best Regards