New BIG-IP ASM v13 Outlook Web Access (OWA) 2016 Ready Template
F5 has created a specialized ASM template to simplify the configuration process of OWA 2016 with the new version of BIG-IP v13
Click here and download the latest version of XML file that contains the template: Outlook Web Access 2016 Ready Template v6.x
Goal: Quick OWA 2016 base line policy which set to Blocking from Day-One tuned to OWA 2016 environment.
Ready Template Deployment Steps
- Download the latest version of the policy XML file (click on the file --> Raw --> Save As) from the link above
- Update Attack Signature to the latest version: Click "Security Update" --> "Application Security" --> "Check for Updates" --> "Install Updates"
- Click "Application Security" --> "Import Policy" --> Select File" and choose the XML file
- Edit the policy name to the protected application name and click "Import Policy"
- Attach the policy to the appropriate virtual server
- Refine learning new records in "Application Security" --> "Policy Building" --> Traffic Learning"
- Observe no false positive occur by validating event logs: "Event Logs" --> "Application" --> "Request"
Important: If the policy is not working properly, please ensure you are using the latest version. If you have any issues or questions, please send any feedback to my email: n.ashkenazi@f5.com
- gu3rr3ir0Nimbostratus
Hi
Just a quick question, does this template works for versions 14?
- Nir_AshkenaziEmployee
Thanks for helping, I fixed the link.
The template is for front end exchange user access (OWA/Outlook) applications and the exchange servers.
- efouliNimbostratus
Just to confirm , this template applied only to OWA or all the Exchange services ?
Thanks a lot.
- Nicol4sNimbostratus
Check this link : https://github.com/f5devcentral/f5-asm-policy-templates/tree/master/application_ready_template/Outlook_Web_Access_2016
This is the official Devcentral Github Repository.
- efouliNimbostratus
Page was not found , any alternative source of the template?
Thanks.
- Nicol4sNimbostratus
Interesting.
We are gonna deploy this template in a few weeks.
I will let you know how it went.
- Balasundaram_32Nimbostratus
Dear All,
I have BIG-IP 14.1.0 version will this Outlook Web Access 2016 Ready Template v6.x template be suitable;e as we have a customer where they want to go to OWA BLOCKING mode very urgently/Fastly . Kindly suggest..
- Nir_AshkenaziEmployee
Thanks Ahmed, the policy support both "http"/"https" protocols and "ActiveSync".
- Ahmed_Al-Dhim_1Nimbostratus
Thank you Nir for your great efforts. Can we know if this template for http or https ? or both ? As well as supporting OWA with ActiveSYNC or donot ?
- Andre-GermanyNimbostratus
Modified ASM cookie is unplayed.
Now have Security >> Application Security: Headers: Cookies List ClientID set by Enforced Coolies to Allowed Cookies. Then the call goes again