Inbound URL Filtering

[VikingsFan]

Been reading some of the other posts on here but they all are related to filtering outbound URLs.  I have a situation where I want to filter out a specific path on our Exchange server.  We currently don't advertise the URL to the outside but looks like with moving to Exchange Online we might need to.  Would a custom application/site be appropriate for restricting an inbound connection to a specific URL?

Example:

BLOCK: https://webmail.domain.com/EWS/*

ALLOW: https://webmail.domain.com/*

Application/Site would match by: webmail.lcec.net/ews/

This would go in the application layer with a source (Internet) -> https://webmail.domain.com/EWS/* (DROP) ?

This sound correct?  We are already doing inbound HTTPS inspection on the webmail.domain.com website.

[the_rock · Accepted solution]

You can do custom, thats fine.

Andy