Forum Discussion
JG
Jan 24, 2017Cumulonimbus
I see. Our deployment here is to allow all through (per business request). So I don't see the bit about APM's group membership checking in our configurations.
Going through the code of the iapp myself though, I can see that "/ecp/default.aspx" is the landing page. I can't find a string match of "ExchClientVer" anywhere.
I also see this:
"Because you are deploying the BIG-IP APM, you can restrict Exchange Administration Center (EAC) access to members of Exchange 2013's Organizational Management group. The BIG-IP APM module queries Active Directory group membership and the BIG-IP APM policy allows or denies access based on membership."
Anyway, there seems to be 2 things here: 1) The APM acl function does not work (not matching a certain string); and 2) it seems pointless to have this function from your perspective.
So what do we want to do?