SMB SSL-VPN Disable authentication controls not working for exchange
03/26/2020 1054 11142
DESCRIPTION: SMB SSL-VPN Disable authentication controls not working for exchange
Starting with firmware 8.5 anonymous authentication is no longer supported when accessing exchange server.
The change was implemented for security reasons and in 8.5 a new feature called PDA(Device Management) was introduced, which requires user to send Device ID during login if enabled. If Authentication control was disabled, user would have no chance to send its device id to the appliance.
Authentication has to be done by SRA and its local user database or SRA using an external authentication server.
Anonymous authentication is also not supported if the WAF is not licensed.