You may find that your DualShield IIS agent stops working after applying an Exchange server CU upgrade. This is because the Exchange CU upgrade has reset all web applications settings, i.e. the "web.config" file, hence caused the settings for the DualShield IIS agent to be lost.
You can restore the DualShield IIS Agent settings in 2 ways, manually or by a PowerShell script.
This has to be done on every IIS node that is enabled with DualShield 2FA. Let's use OWA as an example. In the IIS Manager, navigate to the OWA node:
Right click it, then choose "Explore"
It will take you to the physical folder, C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\owa.
Now, open web.config in a text editor, find the <modules> tag and insert <add name="DasIIS7Native"/> into the tag, e.g:
<modules> <add name="DasIIS7Native"/> </modules>
Below is a complete sample:
Repeat the above work on every node that's been affected.
On the Exchange CAS server, launch a PowerShell window, navigate to the folder:
C:\Program Files\Deepnet Security\IIS\DasWeb
Then, execute the PowerScript below:
If you get some errors then it means that the name of the web site affected is not "Default Web Site".
In this case, you need to edit the line below in the script:
$metapath = $item.path -replace "/LM/W3SVC/1/Root/", "MACHINE/WEBROOT/APPHOST/Default Web Site/"
You need to replace the text "Default Web Site" with the correct web site name. You might also need to replace the text "/LM/W3SVC/1/Root/" if you have multiple web sites running on the same server.
Once you have made and saved the changes, execute the PowerShell script again.