This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SFOS 20, Exchange 2019, WAF Active Sync

Hi,

i read a lot of posts about this Problem, but cant get it running. Made the WAF settings strictly by Sophos KB article, owa, outlook anywhere etc are running properly, but active sync isnt working. Log saus

WAF Anomaly

Inbound Anomaly Score Exceeded (Total Score: 5)

Any suggestions to fix it?

thank you

This thread was automatically locked due to age.

Top Replies

dirkkotte 11 months ago +1 suggested

Suggestions ... Check logfiles and create the exceptions ... support.sophos.com/.../KB-000035562 Or ask your local sophos partner.

0 dirkkotte 11 months ago

Suggestions ... Check logfiles and create the exceptions ...

support.sophos.com/.../KB-000035562

Or ask your local sophos partner.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up +1 Vote Down

Cancel
0 Marco Walbert 11 months ago in reply to dirkkotte

... I thought such a big corporation like Sophos is able to give how tos for such a big player software like exchange on premise.... I found an ecception in another board, and for the 1mb problem i found another post in an exter board. At this board you find 20 threats with my problem, none if these is closed successfull.... And premium partners are asking the same question here....
Cancel
Vote Up 0 Vote Down

Cancel
0 L Sawyer 9 months ago in reply to Marco Walbert

Hey Marco, would you mind sharing those fixes? I have followed these instructions to the letter: https://support.sophos.com/support/s/article/KB-000040209?language=en_US

I am sure you have seen this, given how active you have been on this issue (the instructions are for 2016). I don't want to put the protection in reject mode until I am confident I won't be breaking anything. Any help you can offer on this would be greatly appreciated.
Cancel
Vote Up 0 Vote Down

Cancel
+1 Vivek Jagad 9 months ago

Hey Marco Walbert ,

Thank you for reaching out to the community, Please refer the doc Here >>> Web server protection (WAF) rules

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Marco Walbert 9 months ago in reply to Vivek Jagad

So another thank you for nothing to your sales team. The webserver Priotection for my over years uses Exchange 2019 was one of the core criteria for buying this solution.... So i kicked out my utm for this one.... But thanks for your answer after a month....
Cancel
Vote Up +1 Vote Down

Cancel
0 Marco Walbert 9 months ago in reply to L Sawyer

Hi,

i did so much exceptions so a can do a nat without waf instead....
Cancel
Vote Up 0 Vote Down

Cancel
0 L Sawyer 9 months ago in reply to Marco Walbert

Thanks for getting back. In the end, I came to the same conclusion as you about the protection. I am still using the WAF for host header based forwarding and to block OWA and ECP externally (they will need to use VPN) - but I haven't used any protection profiles.
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Marx 8 months ago in reply to Vivek Jagad

Well this is ridiculous from sophos. Sophos is selling this function for a lot of money or am i wrong?
What for? Seriously sophos ? Only supported exchange is 2013? In 2024?
Cancel
Vote Up +1 Vote Down

Cancel