Block Activesync connections for disabled users?

[Kevin_Hughes]

Is there any way to block ActiveSync connections at the FW for disabled users?  I have several users that have left the company and their accounts have been disabled, however they still have ActiveSync configured on their mobile devices trying to connect to our CAS server.  While they are being denied, the login failures are filling up my logs. 

Any suggestions?

Thanks!

[mmmccorkle]

Kevin,

Hmmm... So to block this you would need to know something like their IP address, right? Otherwise the only 'block' will be denying that user access. I'm sure that their IP address will be constantly changing as they are on a mobile device. If we are not wanting to reply on just the username/credentials being denied and the firewall logging this, then that is the only possible solution I could think of. How else could we block this?

Thanks!

Please do not forget to mark and 'Helpful' or 'Correct' replies.

[oklier]

Thats a though one. I'm trying to get the company to block access to OWA from the world. We dont need it exposed especially due to DLP concerns. Perhaps a MDM package that your IT dept can control and disable during off boarding?