Hi, My client wants to limit only tested devices to use activesync like iPhone, iPad, Samsung GalaxyS2 and Galaxy Nexus and WM. I tried to look at the HTTP Filter setting in my TMG ActiveSync Publishing Rule but the default behaviour is Allow all and block the signature listed. What I need is the opposite, Block all and only allow the user-agent listed (e.g. iPhone, SamsungGTI9100). Is there anywhere I can do this? Thanks, Neil

See this - http://blogs.technet.com/b/exchange/archive/2010/11/15/3411539.aspxSukh

Hi, I forgot to mention that the environment is Exchange 2007 SP2. Thanks for the link anyway as I think I will also try it for our 2010 version. Neil

For Exchange 2007, you may block the device via the ActiveSync Policy "Allow non-provisionable devices". Refer to: Exchange 2007 ActiveSync policies http://blogs.technet.com/b/exchange/archive/2007/05/23/3402905.aspx Fiona Liao TechNet Community Support

You do this by using PointSharp Secure ActiveSync that is an webfilter installed on then TMG server, it can limit what devices can be used as well as limiting content in the perimiter. It will allow you to build rules based on DeviceID, DeviceTyp, UserAgent and UserAttrbiutes. http://www.pointsharp.com/products/secure-activesync Mattias