Allow only ActiveSync traffic to Exchange via ARR

Hi,
We have a new Exchange 2013 infrastructure up and running and have setup an ARR Proxy Server in a DMZ to allow external users to access the new system for ActiveSync.
I've followed a couple of MS and Exchange blogs to get ARR setup and on initial testing it works great, however we then noticed that external users are able to access OWA via ARR as well but we only want to allow access to ActiveSync.
On further testing it seems that if we change the * wildcard condition to *activesync we get a weird authentication error from the MS Connectivity Analyzer as shown below:-
"The Initial Anonymous HTTPS request didn't fail, but Anonymous isn't a supported authentication method for this scenario"
If we change the Condition back to just an * it then works fine.
Can anyone let me know how to change the Rule in ARR to only allow ActiveSync traffic?
Cheers for now
Russell

I've managed to resolve the problem, it was just a matter of getting the pattern correct and in the end it has to be *activesync* in order to work correctly.
It worked OK from the connectivity analyser without the second * but not from a Windows Phone, but adding the second * sorted out the phone.
Cheers for now
Russell

Similar Messages

Allow only http traffic on iphone

creating a mobileconfig file to allow our company iphones access our apn but we only want http only traffic to use this. anyone know the playload to use in the xml?

Do you know of any ways of manually editing the mobileconfig file to configure HTTP only proxies

How to allow only the specified users/groups to open my pdf files...

Hi there,
I'm looking for resources/documents describing how to allow only the specified users/groups to open my pdf files by the Java API...
I've found a sample code creating a policy in the following document.
http://livedocs.adobe.com/livecycle/es/sdkHelp/programmer/sdkHelp/wwhelp/wwhimpl/js/html/w whelp.htm?context=sdkHelp&topic=learn_lc_sdk_invokeremoting
( API Quick Starts (Code Examples) > Rights Management Service API Quick Starts > Quick Start: Creating a new policy using the Java API )
But the sample code doesn't set recepients( users/groups ) who can open the pdf file.
How can I make it ?
Any samples ? or Does anybody can tell me which Java classes/methods I should use ??
Policy#addPolicyEntry(PolicyEntry policyEntry) ??
PolicyEntry#setPrincipal(Principal principal) ??
or none of them ?
Any hints are appreciated !
Thanks.

I'm not exactly sure what you are tying to do here, but typical approach when issuing one PDF par user/groups scenario goes like:
1. Create policy for specific purpose and add principal (user/group)
2. Apply policy on server side
3. Deliver the file (via email etc...)
If you are looking for sample codes, try quick start.
http://livedocs.adobe.com/livecycle/8.2/programLC/programmer/help/wwhelp/wwhimpl/js/html/w whelp.htm?&accessible=true
If you go "API Quick Start/Rights Management Service API Quick Starts", you might find something useful. I think you need "Creating Policies" or "Modifying Policies" for step 1 above, and "Applying Policies to PDF Documents" for step 2.
Hope this helps.

"XML declaration allowed only at the start document "on Safari Iphone3G

Hi
I get the following error message on my Iphone3G with Vodaphone Hong Kong:
"The following page contains the following errors:
error on line 4 at column 6; XML declaration allowed only at the start document
Below is a rendering of the page up to the first error"
Moreover I see nothing in the page its empty.
the corresponding URL is "http://smartone-vodafone.m-finance.net"(only avaible to vodaphone suscriber i guess
with APN:Smartone-Vodaphone)
does anyone get same problem? how to solve it?
thx very much

Hi,
I am not sure if you can access it because its for Vodaphone suscriber only, I access first to "SmartIn" service via http://wap.smartone-vodafone.com so thereafter I enter to an other payed financial page "PLUS" via "http://plus.smartone-vodafone.com" and then the "Quote" menu afterwards I cannot open the page to see the price of Gold/Silver which gave me the previous error message and blank page at this adress on my Iphone3G
"http://smartone-vodafone.m-finance.net/PLUSGS_ST/EN/index.jsp"
But when I surf on my Laptop I found it seems to be a service provide by this other company "http://smartone-vodafone.m-finance.net"
I tried different setting (console off/on) javascript/plug-ins/block pop up/accept cookies all On or Off but no succes. Its a pity because I bought Iphone3G only for that
Maybe Apple should discuss between Vodaphone and this company how to solve the problem. It maybe only one error line code because every other page are fine?? my
thank you very much again,

Cancel material exchange via ADSUBCON - subcontracting flow

Hi all,
I'm facing an issue related to the subcontracting process. Actually, a key user made an material exchange via the T code ADSUBCON and SAP system has created automatically a sub item line into the PO (item line 11 against its higher level item 10). Afterwards, the user has noted he made a mistake and now he wants to cancel the material exchange. He tried to cancel the sub item line 11 directly into the PO but SAP deletes also the higher level item 10.
My question is : How I can cancel the material exchange without deletion of the higher level item from SAP system ?
Thanks for your help.
Regards,
LYD

Hi,
If I set the deletion indicator to the sub item selected, the whole item gets deleted in the PO by SAP. but actually we do not want that SAP deletes also the main item. We need to keep this main item.
The customer would just like to reverse a material exchange made with T. code ADSUBCON.
I've just try with material without serial number it is working via T. code ADSUBCON. The deletion indicator is set only on the sub item into the PO. This is what we expect but when we try with material which has serial number, all item lines of the PO get deleltion indicator set.
Regards,
LYD

Route only some traffic trough VPN

Is it possible to route only certain traffic through VPN and other through default gw route?
I have tried to google it, i didn't find anything usefull.
Thank you

Replace 'eth1' with 'ppp0' or 'tun0' or whatever your VPN interface is:
http://bbs.archlinux.org/viewtopic.php? … 63#p497763
Then for the ports you want to send via the VPN, add a rule like this:
iptables -t mangle -A OUTPUT -p tcp --dport XX -m state --state NEW -j MARK --set-mark 102
Last edited by fukawi2 (2009-09-21 23:09:11)

2960 Allow only PPPoE on port

Hi all,
is there any way to allowe only PPPoE comunication on ethernet port on 2960X or 2960S catalyst switches?
Thanx
BR
David

Hi Reza,
I think David's question focused on something else: can you configure an access port on a switch so that the only frame it accepts is a PPPoE frame?
In my opinion, that should be possible - the easiest way of doing that would simply be to configure a port-ACL (PACL) that drops all IP traffic whatsoever. PPPoE-encapsulated packets are not treated as IP packets by the switch, so IP PACL will not apply. So simply doing something like this should do the trick:
ip access-list standard NoIP deny any!interface FastEthernet0/1 ip access-group NoIP in
If we wanted to be very precise, we could also create a MAC ACL to further narrow down the non-IP traffic allowed through a port. PPPoE uses EtherType values 0x8863 and 0x8864. The MAC ACL would need to be carefully specified, though, to allow other Layer2 control and management plane traffic (STP, DTP, VTP, CDP, LLDP, PAgP/LACP, UDLD, LOOP...), so it could be more difficult to create properly.
I even believe that creating a VACL would be possible although the VACLs are not officially supported on 2960 Catalysts yet (still, with a very recent IOS, they can be created and used just fine).
Best regards,
Peter

Can't get read-only access to my switches via http

I set up a couple of users for read-only access to our switches via their web browsers. I set this up in Network Assistant. However when we try to log in, only a level 15 user is allowed to log in and there doesn't seem to be any way change this.
I know in Network Assistant, you can choose which user level you want, but I don't see any way to do it via the web interface.
What am I missing here?

Implementing security within a switching environment is less intuitive than in a router. Switches, by design, tend to recognize only two levels of administrative access - user exec mode or privileged exec mode. Implementation of security at different access levels, level 15, etc, can be tricky and should be done at the command prompt, not in the GUI.
You should reset your config and do not use Network Assistant for this purpose; it is "buggy."

Allow other people to upload photos via photostream

How can i allow other people to upload photos via shared photostream?

You can't. They can only create their own shared photostreams.

How can I see shared pc with firewall set to allow only essential services?

How can I see shared pc with firewall set to allow only essential services?
So far if I set it as above then shared does not show up? I have to set the firewall to set access to specific applications and services to get access to my windows based hard drive.
Cheers
Mike R

Ok I solved it myself. Not an ideal solution as I have to connect it manually each time but it will do... Unless anyone has a way to have it auto connect when I start the mac.
Cheers
Mike R

So my I phone 4s volume has decided to pack allowing only my phone to make sounds when I have an incoming call, I can also here fine using facetime and receiving calls. YouTube, soundcloud, any of I players will no longer play sound. I've restored the ph

So my I phone 4s volume has decided to pack allowing only my phone to make sounds when I have an incoming call, I can also here fine using facetime and receiving calls. YouTube, soundcloud, any of I players will no longer play sound. I've restored the phone using iTunes on my laptop and checked all the volumes are turned up and the button at the left hand Side of the phone is in the correct position.

Try inserting and re-inserting your headphones 7 or 8 times. Also try cleaning out the headphone jack in case of debris that might be interfering with the connection/disconnection.

Coding in the Trasformation to allow only few currency types.

HI
Can you please let me know how i can write a program which allows only few currency's to be accepted and if other then these currency exists that particular record to be deleted before loading into the PSA
I wrote a code llike this but this is only valid for ZAR
*delete SOURCE_PACKAGE where CURRENCY ne 'ZAR'.
for example if i want to allow ZAR, USD, EUR only
hwo can i code this in the Start Rotine in the TRansformations.
please let me know
regards
Krishna Mohan.

Hi Krishna,
You can try this code :
    data: s_cur   type c length 3.
    data : i_rng_cur like range of s_cur.
    data : rng_cur like line of i_rng_cur.
    rng_cur-sign = 'I'.
    rng_cur-option ='EQ'.
    rng_cur-low = 'ZAR '.
    append rng_cur to i_rng_cur.
    rng_cur-low = 'USD '.
    append rng_cur to i_rng_cur.
    rng_cur-low = 'EUR '.
    append rng_cur to i_rng_cur.
   delete source_package where CURRENCY not in i_rng_cur .
This code will delete all currency other than ZAR ,EUR ,USD.You can append more values if you want .
Regards,
Jaya Tiwari

Transfer on last day allowed only in closed fiscal year

Hi Guru,
Client kept asset transfer date as 31/10/2010 first, uploaded some asset on this date, due to some reason asset uploading was not completed for all the asset. so all the asset value which was uploaded on 31/10/2010 was done as zero.
Client took decision to upload all the asset on last day of FY 10-11 i.e 31-03-2011. transfer date was changed as 31-03.2011 and moved up to quality, unfortunatly rquest was not moved to PRD and while uploading to PRD again 25 asset got uploade by transfer date as 31/10/2010, when realized transport req of change transfer date is moved to PRD and abt 50000 asset of total 70000 asset got uploaded.F.Y 2010 was closed while uploading this assets
Year 2010 was again open for posting of cj88 transaction.
When we are uploading balance assets in the system getting error message Transfer on last day allowed only in closed fiscal year
When tried to close FY 2010, system is giving message ' Depreciation not posted completly' for 25 assets.
i tried to do value as zero for these asset through as92 but system agiain giving message Transfer on last day allowed only in closed fiscal year
so situation is we are not able to close FY 2010 and thus assets are not getting uploaded. if we run depreciation for said 25 assets for year 2010 it is not proper because actual transfer date is 31.03.2011
Please Help
Regards,
Shekhar

hi,
go to customizing and under asset data transfer - parameters for data transfer - date specifications - specify transfer date/last closed FY--- you need to place the last day of the period where you have last run depreciation for the legacy system and make sure that I am assuming at this stage will be the previous period or this period.
rgds,
jay

Error In MIRO GL account allows only output tax

Hello All,
We are facing an error in MIRO that GL account xxxxx allows only out put tax. The scinario & settings are as below.
FB60
There is no error when using the particular tax code sytem posts the document
MIRO
Same vendor & tax code used as in FB60
The systemshows an error that GL ***** allows only output tax.
TAX CODE settings in FTXP
The GL showing error is in tax code
GL settings
In GL master data in control tab , the tax category is defined as out put tax
QUERY
Why in FB60 it allows the GL & not in MIRO ( Both are vendor invoice and suppose to work in similar manner)
please note in both the cases the entries are same
Vendor Cr
Expense / Stock Dr
VAT GL **** Cr
VAT GL-2 Dr
VAT GL**** is not picking @ MIRO & Picks @ FB60 with out any error
Any Idea !!!
Thanks & Regards
Arun R

Hi,
The problem is resolved .
The error was due to the fact that the VAT was an aquisiton tax for europe.
The details are in note 373587
Thanks for the support
Regards
Arun

IMac 7,1. Snow Leopard. 2 printers that printed nothing, or more than ±1/4 from page top. Reinstalled OS. Time Machine BU now allows only latest (faulty) files. ±4 series shown, each taking +8 hours to complete. How to reinstall from 'DEVICES' in 'iMac'?

iMac 7,1. SnowLeopard. 2 printers that printed nothing, or more than ±1/4 from page top.Reinstalled OS. Time Machine BU now allows only latest (faulty) files. ±4series shown, each taking +8 hours to complete. How to reinstall from ‘DEVICES’in ‘iMac’?

You need to get rid of MacKeeper (Zeobit). Do not use their uninstaller, follow the instructions here ...
http://applehelpwriter.com/2011/09/21/how-to-uninstall-mackeeper-malware/
When that is done there does not appear to be a lot wrong if you correct the red ink entries.
The 4Gb is sufficient for Yosemite though 6 or 8 Gb would be better. You may find the download slow so be prepared.

Allow only ActiveSync traffic to Exchange via ARR

Similar Messages

Maybe you are looking for