Block access to Exchange OWA but allow access to Exchange active sync

Mark_Edwards — Tue, 05 Apr 2022 13:40:56 GMT

Hi,

wasn't sure where to ask this so apologies in advance.

The customer has an audit finding as they allow access to Outlook Web Access to anyone on the Internet.

Basically firewall rule allowing https to an IP with a NAT.

They would like to block e.g. mail.domain.com/owa but allow mail.domain.com/ActiveSync.

Both use https.

I know this can be achieved using Capsule Workspace and Mobile Access VPN but as they only have the default license this isn't an option.

Is there anyway to achieve this?

Thanks.

Re: Block access to Exchange OWA but allow access to Exchange active sync

PhoneBoy — Tue, 05 Apr 2022 14:07:14 GMT

Your basic options are:

Mobile Access Blade (probably the best way to achieve this)
HTTPS Inspection + App Control/URL Filtering on the traffic coming to the OWA server (can bypass for everything else)

Of course, if your license is Firewall only, neither of these are options.