Forum Discussion
Kai_Wilke
Dec 07, 2015MVP
Hi Monty,
the Rule has a little problem with the tolower formating, but in general it would work. When formating a string to lower the compare string has to be lower case too, otherwise it won't match.
when HTTP_REQUEST {
log local0. "Client IP: [IP::client_addr]"
log local0. "URI: [HTTP::uri]"
if {string tolower [HTTP::uri] contains "/microsoft-server-activesync*" and not ([class match [IP::client_addr] equals Airwatch_SEG_Servers]) } then {
log local0. "dropped connection"
reject
} else {
pool EXCHANGE_2013_https_int_pool
}
}
Cheers, Kai