I have been battling a problem for quite sometime. I think the end result is I somehow need to dig through the IISLogs for activesync information and pass it to the PA via their API. Unfortunately I have no clue how to get started on this. Story is as follows: Typical AD environment. Ipads and other non domain devices are coming inside our network. Since the PA can monitor the internal exchange server logs and determine User-IDs, I figured this was the perfect solution to be able to use the PA rules by User-ID, regardless of the device. If all else fails it falls back to the captive portal. It ends up that the only time the authentication of an "activesync" client is logged to the windows event logs is during the setup process....why, I am not sure. But I can see the activesync activity in the IIS logs but NOT in the windows event logs. End result is the Ipad IP-user mapping expires and falls back to the captive portal. While the captive portal does work, the timeout for the user is limited to 1440 minutes and is not terribly convenient for my many types of users (young students to teachers and everything between), especially since they are already authenticating for email! Anyway, any thoughts would be appreciated, Bob
... View more
