New BIG-IP ASM v13 Outlook Web Access (OWA) 2016 Ready Template
F5 has created a specialized ASM template to simplify the configuration process of OWA 2016 with the new version of BIG-IP v13
Click here and download the latest version of XML file that contains the template: Outlook Web Access 2016 Ready Template v6.x
Goal: Quick OWA 2016 base line policy which set to Blocking from Day-One tuned to OWA 2016 environment.
Ready Template Deployment Steps
- Download the latest version of the policy XML file (click on the file --> Raw --> Save As) from the link above
- Update Attack Signature to the latest version: Click "Security Update" --> "Application Security" --> "Check for Updates" --> "Install Updates"
- Click "Application Security" --> "Import Policy" --> Select File" and choose the XML file
- Edit the policy name to the protected application name and click "Import Policy"
- Attach the policy to the appropriate virtual server
- Refine learning new records in "Application Security" --> "Policy Building" --> Traffic Learning"
- Observe no false positive occur by validating event logs: "Event Logs" --> "Application" --> "Request"
Important: If the policy is not working properly, please ensure you are using the latest version. If you have any issues or questions, please send any feedback to my email: n.ashkenazi@f5.com
24 Comments
- gu3rr3ir0
Nimbostratus
Hi
Just a quick question, does this template works for versions 14?
- Nir_Ashkenazi
Employee
Thanks for helping, I fixed the link.
The template is for front end exchange user access (OWA/Outlook) applications and the exchange servers.
- efouli
Nimbostratus
Just to confirm , this template applied only to OWA or all the Exchange services ?
Thanks a lot.
- Nicol4s
Nimbostratus
Check this link : https://github.com/f5devcentral/f5-asm-policy-templates/tree/master/application_ready_template/Outlook_Web_Access_2016
This is the official Devcentral Github Repository.
- efouli
Nimbostratus
Page was not found , any alternative source of the template?
Thanks.
- Nicol4s
Nimbostratus
Interesting.
We are gonna deploy this template in a few weeks.
I will let you know how it went.
- Balasundaram_32
Nimbostratus
Dear All,
I have BIG-IP 14.1.0 version will this Outlook Web Access 2016 Ready Template v6.x template be suitable;e as we have a customer where they want to go to OWA BLOCKING mode very urgently/Fastly . Kindly suggest..
- Nir_Ashkenazi
Employee
Thanks Ahmed, the policy support both "http"/"https" protocols and "ActiveSync".
- Ahmed_Al-Dhim_1
Nimbostratus
Thank you Nir for your great efforts. Can we know if this template for http or https ? or both ? As well as supporting OWA with ActiveSYNC or donot ?
- Andre-Germany
Nimbostratus
Modified ASM cookie is unplayed.
Now have Security >> Application Security: Headers: Cookies List ClientID set by Enforced Coolies to Allowed Cookies. Then the call goes again
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)