Exchange Enhanced Protection with SSL WAF

Question

So i know this topic has been discussed before but no one puts in a complete answer so going to ask it again. 
 After enabling Exchang enhanced protection OWA externall breaks. I know this is due to the SSL offloading as this is mentioned in several posts. As Microsoft plans on enforcing this configuration in CU 14 for Exchange 2019 my question is how are we meant to configure the Firewall rules so that i still have firewall proection? 
 
 I have exchange 2019 behind a XG firewall running SFOS 20.0.0 GA-Build222 
 
 Thanks

Vivek Jagad · Accepted Answer

Hello gdmacmillan ,

Thank you for reaching out to the community, WAF rules don't support Microsoft Exchange versions later than 2013.

Sophos Firewall offers preconfigured WAF rule templates with specific paths and protection policies for Exchange Autodiscover, Outlook Anywhere (Outlook 2007, 2010, 2013), Outlook Web Access (in an Exchange general rule), Lync, Sharepoint (2010 and 2013), Remote Desktop Gateway 2008 R2, and Remote Desktop Web 2008 R2.

Refer the doc - Web server protection (WAF) rules.

Exchange Enhanced Protection with SSL WAF

Top Replies