Block access to Exchange OWA but allow access to Exchange active sync

[Mark_Edwards]

Hi, 

wasn't sure where to ask this so apologies in advance.

The customer has an audit finding as they allow access to Outlook Web Access to anyone on the Internet.

Basically firewall rule allowing https to an IP with a NAT.

They would  like to block e.g. mail.domain.com/owa but allow mail.domain.com/ActiveSync.

Both use https. 

I know this can be achieved using Capsule Workspace and Mobile Access VPN but as they only have the default license this isn't an option.

Is there anyway to achieve this? 

Thanks.