topic Re: Block Exchange ECP externally in General Topics

Block Exchange ECP externally

M.Ahmed136397 — Wed, 11 Sep 2024 10:32:16 GMT

Hello team,

We are experiencing with our hosted exchange server on the cloud. Despite efforts from our Server team to block ECP access from external networks, it remains accessible. The team has suggested blocking ECP for external networks only.

I have attempted to address this by creating a URL filter and applying it to the security policies, however, the issue persists.

I kindly seek your support in effectively blocking ECP access from external networks.

Thanks.

Re: Block Exchange ECP externally

JayGolf — Mon, 16 Sep 2024 22:12:59 GMT

Hi @M.Ahmed136397 ,

Are you trying to restrict access to the Exchange admin center?

Re: Block Exchange ECP externally

Brandon_Wertz — Tue, 17 Sep 2024 15:31:49 GMT

@M.Ahmed136397 wrote:

Hello team,

We are experiencing with our hosted exchange server on the cloud. Despite efforts from our Server team to block ECP access from external networks, it remains accessible. The team has suggested blocking ECP for external networks only.

I have attempted to address this by creating a URL filter and applying it to the security policies, however, the issue persists.

I kindly seek your support in effectively blocking ECP access from external networks.

Thanks.

What is ECP?

You mentioned that your exchange is hosted, hosted where? Do you have a Palo firewall in this hosted environment? if you don't have/own/control a firewall in this hosted environment you won't be able to apply policy to block what's allowed from this hosted instance.

If you go have a firewall there then it would be as simple as creating a security policy that blocks access to the public IP to what whatever ECP is.

Re: Block Exchange ECP externally

M.Ahmed136397 — Thu, 19 Sep 2024 15:24:56 GMT

Hey Jay,

Yes, you are right, I want to restrict access to Exchange Admin Center from externally.

i really appreciate your response.

Re: Block Exchange ECP externally

M.Ahmed136397 — Thu, 19 Sep 2024 15:26:56 GMT

Hey Brandon,

ECP is Microsoft Exchange Admin link, kinldy i need to block the Exchange Admin access but to allow exchange mail access from externally.

Thanks for your response.

Re: Block Exchange ECP externally

OtakarKlier — Thu, 19 Sep 2024 15:29:21 GMT

Hello,

You could try to create a custom URL category and add <ServerFQDN>/ecp and set a security policy to block it?

Just a thought.

Regards,

Re: Block Exchange ECP externally

M.Ahmed136397 — Sun, 29 Sep 2024 13:46:17 GMT

Hello,

Thanks fo rcommenting on this thread.

I created the URL catogery adn added <ServerFQDN>/ecp and set a security policy to block it, but when we open <ServerFQDN>/OWA and once the link is opened and then replace OWA with ecp then the admin access page opens.

Your support is highly appreciated.

Regards,