Link to home
Start Free TrialLog in
Avatar of Dustin Blackwell
Dustin Blackwell

asked on

IIS HTTP OPTIONS deny breaks Apple Mail

I had a PCI compliance scan done and it came back with a failure for IIS OPTIONS and they said I needed to set to deny it in IIS. Whenever I do that it causes our phone email stop syncing. We are using Exchange 2010 server at the company and Apple Mail app to sync (please don't just suggest I use something else). I have googled until I'm blue in the face and can't find any relationship between OPTIONS method and Apple Mail. Can anyone please help?
Avatar of William Fulks
William Fulks
Flag of United States of America image
When you try to configure an iPhone, does it give an error like cannot connect to server or does it say invalid username/password?
Avatar of Dustin Blackwell
Dustin Blackwell

ASKER

Thank you William. These accounts have been setup for a while and working fine. It is only when I apply the OPTIONS deny in IIS that they stop syncing.
Avatar of David Favor
David Favor
Flag of United States of America image
Provide a full copy of the PCI Compliance failure report.
Avatar of masnrock
masnrock
Flag of United States of America image
Whatever is on your network that's causing you to require the PCI scan... is there a way to move that?
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image
you could do the iis options deny on a per site basis rather than globally in IIS
http://www.valencynetworks.com/kb/how-to-disable-options-method-vulnerability.html
Avatar of Dustin Blackwell
Dustin Blackwell

ASKER

I did set it on the site level.
This question needs an answer!
Become an EE member today
7 DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.