Getting many Alert & Deny for Outlook Web Access

[Ashik_Sheik]

Hi Guys,

We are getting so many alerts and deny messages under attack log for OWA. Fortiweb is also not allowing a few uses to send an email.

We are using exchange template under a protection profile .We have not yet implemented ML.

The Fortiweb version is 6.0.2 .

The error screenshot is attached.

Ashu

[Ashik_Sheik]

This issue getting for Active Sync .The URL is 

/mapi/emsmdb/?MailboxId=ce55499d-011c-465a-98ce-989374fbb1a4@abc.com /mapi/emsmdb/?MailboxId=79189cb5-2ef1-4c59-8349-fd1b022dfd8d@abc.com

In the above URL only mailbox ID is different so fortiweb is detecting this as attack. Will ML will help to resolve this issue ?

[Ashik_Sheik]

Any idea Folks ..