Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an SBS2011 server, I need to allow ActiveSync (by forwarding 443 from the firewall to the server) but disable OWA and SharePoint when being accessed remotely (disable for any connections to these sites from IP's other than the local subnet).

I think this might be possible in IIS but would like recommendations on how to do this properly.

Can someone please advise the best way to do this.


share|improve this question
up vote 1 down vote accepted

I was able to resolve this by IPv4 restrictions in IIS 7.

I set the default policy to DENY and set an allow range for the local subnet.

Now when i log on from outside of the network i get an access denied page.

The above restrictions were only applied to the remote, mycompany and owa sites.

The rpc, active-sync and other sites have been left as-is.

share|improve this answer
Clever, when I first read your question my only thinking was that a reverse proxy or the webserver itself would have to do this. Or an L7 firewall like a Palo Alto – SpacemanSpiff Aug 1 '12 at 14:39

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.