Block Exchange ECP externally

[M.Ahmed136397]

Hello team,

We are experiencing with our hosted exchange server on the cloud. Despite efforts from our Server team to block ECP access from external networks, it remains accessible. The team has suggested blocking ECP for external networks only.

I have attempted to address this by creating a URL filter and applying it to the security policies, however, the issue persists.

I kindly seek your support in effectively blocking ECP access from external networks.

Thanks.

[JayGolf]

Hi @M.Ahmed136397 ,

Are you trying to restrict access to the Exchange admin center? 

[Brandon_Wertz]

---

@M.Ahmed136397 wrote:

Hello team,

We are experiencing with our hosted exchange server on the cloud. Despite efforts from our Server team to block ECP access from external networks, it remains accessible. The team has suggested blocking ECP for external networks only.

I have attempted to address this by creating a URL filter and applying it to the security policies, however, the issue persists.

I kindly seek your support in effectively blocking ECP access from external networks.

Thanks.

---

What is ECP?

You mentioned that your exchange is hosted, hosted where?  Do you have a Palo firewall in this hosted environment?  if you don't have/own/control a firewall in this hosted environment you won't be able to apply policy to block what's allowed from this hosted instance.

If you go have a firewall there then it would be as simple as creating a security policy that blocks access to the public IP to what whatever ECP is.

[M.Ahmed136397]

Hey Jay,

   Yes, you are right, I want to restrict access to Exchange Admin Center from externally.

i really appreciate your response.

[M.Ahmed136397]

Hey Brandon,

ECP is Microsoft Exchange Admin link, kinldy i need to block the Exchange Admin access but to allow exchange mail access from externally.

Thanks for your response.

[OtakarKlier]

Hello,

You could try to create a custom URL category and add <ServerFQDN>/ecp and set a security policy to block it?

Just a thought.

Regards,

[M.Ahmed136397]

Hello,

Thanks fo rcommenting on this thread.

I created the URL catogery adn added <ServerFQDN>/ecp and set a security policy to block it, but when we open <ServerFQDN>/OWA and once the link is opened and then replace OWA with ecp then the admin access page opens.

Your support is highly appreciated.

Regards,