Block Microsoft Exchange Autodiscover requests
In some cases, Microsoft Exchange Autodiscover service requests can be "noisy", triggering large numbers of HTTP 404 (Not found) errors.
This example blocks requests for autodiscover.xml and autodiscover.src:
- Expression:
(ends_with(http.request.uri.path, "/autodiscover.xml") or ends_with(http.request.uri.path, "/autodiscover.src")) - Action: Block
Alternatively, customers on a Business or Enterprise plan can use the matches comparison operator for the same purpose. For this example, the expression would be the following:
(http.request.uri.path matches "/autodiscover.(xml|src)$")