Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 3284 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAF and ActiveSync with iPhone

lonex
Hi,

this week I've tried to remove our NAT rule that allows us to use Outlook WebAccess and ActiveSync with our iPhones from outside our office and repace it with the new Web Application Firewall. After a bit of tweaking, I managed to get Outlook WebAccess to work perfectly.
But I couldn't manage to get ActiveSync with the iPhones to work. I had to acceppt the new certificate, but it wasn't able to fetch any new eMails. And since then, its batteries were draining really fast and it got quite warm.

I had to put the NAT rule back for now, but is there a solution for this? Or does ActiveSync just not work with WAF?


This thread was automatically locked due to age.
Parents
  • 0
    Hi, lonex, and welcome to the User BB!

    I don't know the answer to this, but maybe there's a workaround.  Since the real concern is protecting Outlook Web Access, you could create a Network definiton for the public range used by the iPhone and use that as the source in the DNAT instead of "Any" or "Internet."  Since DNATs are considered before proxies, you shouldn't need an exception in WAF.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    Hi, lonex, and welcome to the User BB!

    I don't know the answer to this, but maybe there's a workaround.  Since the real concern is protecting Outlook Web Access, you could create a Network definiton for the public range used by the iPhone and use that as the source in the DNAT instead of "Any" or "Internet."  Since DNATs are considered before proxies, you shouldn't need an exception in WAF.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children