Hi,
i have used the follow KB articles from Sophos (Configuring UTM firewall for Exchange.pdf) to config my WAF for Exchange 2010.
i can request my exchange URL from outside (https://outlook.******x.xx/owa); the pop-up window for the login shows up and i can type the username/password. After the login i get a white page....
from the waf live log i have this information:
014:01:29-12:37:54
ASG8 reverseproxy: [Wed Jan 29 12:37:54.415628 2014] [security2:error] [pid 23655:tid 3761679216] [client ***.***.***.***] ModSecurity: Request body (Content-Length) is larger than the configured limit (134217728).
[hostname "outlook.***.xx"] [uri "/rpc/rpcproxy.dll"] [unique_id "UujoErIPXMoAAFxnCqIAAABs"]
2014:01:29-12:37:54
ASG8 reverseproxy: srcip="8x.xx.x6x.5" localip="xx8.x5.9x.2xx"
size="352" user="-" host="8x.xx.x6x.5" method="RPC_IN_DATA"
statuscode="413" reason="-" extra="-" time="1738"
url="/rpc/rpcproxy.dll" server="outlook.***.xx" referer="-"
cookie="OutlookSession=\"{A53091A2-07B4-42C3-B203-0DD705BEAFF9}
Outlook=14.0.7108.5000 OS=6.1.7601\"" set-cookie="-"
2014:01:29-12:37:54
ASG8 reverseproxy: [Wed Jan 29 12:37:54.637865 2014] [url_hardening:error] [pid 23655:tid 3753286512] [client 8x.xx.x6x.5:4988] No signature found, URI:
outlook.***.xx/.../rpcproxy.dll
2014:01:29-12:37:54
ASG8 reverseproxy: srcip="8x.xx.x6x.5" localip="xx8.x5.9x.2xx"
size="279" user="-" host="8x.xx.x6x.5" method="RPC_OUT_DATA"
statuscode="403" reason="url hardening" extra="No signature found"
time="44904" url="/rpc/rpcproxy.dll" server="outlook.***x.xx"
referer="-"
cookie="OutlookSession=\"{A53091A2-07B4-42C3-B203-0DD705BEAFF9}
Outlook=14.0.7108.5000 OS=6.1.7601\"" set-cookie="-"
Does somebody know where my mistake is?
This thread was automatically locked due to age.