We changed from DNAT to WAF for activesync and outlook anywhere.
It did cause the odd issue especially with OA and authentication.
I'd read this article before but missed some valid points
and in that article was "if you skip some rules (the ones that are flagged up), it breaks rpc"
I actually witnessed this which was a bit strange as normally you would skip those rules if they were being flagged up by a trusted source.
Anyway, I followed the article, with the exceptions and rules and OA does work so hopefully that may help somebody going forward.
The old WAF can be a bit qwerky at times!
This thread was automatically locked due to age.