02-28-2012 09:26 AM
Hello,
I wonder if the following is possible. (Question from a potential customer).
They want to filter/DENY MAIL from the activesync traffic to mobile devices (users in the organzation using phones that are not approved because of security).
But they want to ALLOW calendar sync and contacts sync.
We already have configured inbound-ssl decryption on this traffic, but there does not exist any sub-applications of activesync.
So my question is.
Is this possible? Is it possible to write our own filter for mail sync or is this MicroSoft protocol a special one?
Jo Christian
02-28-2012 04:52 PM
Hi...We cannot filter activesync traffic as described to allow only mail & calendar sync. It may be possible to write custom signature(s) to match and then control them. You will have to do some pcaps and inspect the payload. Thanks.
02-29-2012 01:06 AM
You can request app enhancement from the Apps and Threats Research Center.
http://www.paloaltonetworks.com/researchcenter/tools/
From there you can click on Submit an app and provide details there.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
