This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SFOS 20, Exchange 2019, WAF Active Sync

Hi,

i read a lot of posts about this Problem, but cant get it running. Made the WAF settings strictly by Sophos KB article, owa, outlook anywhere etc are running properly, but active sync isnt working. Log saus

WAF Anomaly

Inbound Anomaly Score Exceeded (Total Score: 5)

Any suggestions to fix it?

thank you

This thread was automatically locked due to age.

Top Replies

dirkkotte 10 months ago +1 suggested

Suggestions ... Check logfiles and create the exceptions ... support.sophos.com/.../KB-000035562 Or ask your local sophos partner.

Parents

0 dirkkotte 10 months ago

Suggestions ... Check logfiles and create the exceptions ...

support.sophos.com/.../KB-000035562

Or ask your local sophos partner.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up +1 Vote Down

Cancel
0 Marco Walbert 10 months ago in reply to dirkkotte

... I thought such a big corporation like Sophos is able to give how tos for such a big player software like exchange on premise.... I found an ecception in another board, and for the 1mb problem i found another post in an exter board. At this board you find 20 threats with my problem, none if these is closed successfull.... And premium partners are asking the same question here....
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Marco Walbert 10 months ago in reply to dirkkotte

... I thought such a big corporation like Sophos is able to give how tos for such a big player software like exchange on premise.... I found an ecception in another board, and for the 1mb problem i found another post in an exter board. At this board you find 20 threats with my problem, none if these is closed successfull.... And premium partners are asking the same question here....
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 L Sawyer 9 months ago in reply to Marco Walbert

Hey Marco, would you mind sharing those fixes? I have followed these instructions to the letter: https://support.sophos.com/support/s/article/KB-000040209?language=en_US

I am sure you have seen this, given how active you have been on this issue (the instructions are for 2016). I don't want to put the protection in reject mode until I am confident I won't be breaking anything. Any help you can offer on this would be greatly appreciated.
Cancel
Vote Up 0 Vote Down

Cancel
0 Marco Walbert 9 months ago in reply to L Sawyer

Hi,

i did so much exceptions so a can do a nat without waf instead....
Cancel
Vote Up 0 Vote Down

Cancel
0 L Sawyer 9 months ago in reply to Marco Walbert

Thanks for getting back. In the end, I came to the same conclusion as you about the protection. I am still using the WAF for host header based forwarding and to block OWA and ECP externally (they will need to use VPN) - but I haven't used any protection profiles.
Cancel
Vote Up 0 Vote Down

Cancel