Ms Exchange remote code excution

Hello! 

I'm new to Fortianalyzer. Can someone acknowledge, what I see on this screenshot. If I'm right, someone try to connect to my MS Echange with exploit and Fortigate IPS blocked it.

How can I be sure, that this is isn't a connection from my network to C&C servers?

Thanks !