How to block access from Internet to Exchange Control Panel?

[lotfi_boucherit]

Hello,

We lately migrated to Exchange 2016 and we are publishing Exchange Services through Fortiweb 400, but discovered lately that even the Exchange Control Panel is published, by simply specifying the [link]HTTPS://mail.domain.net/ecp[/link]

I would like to know, if it is possible to block that folder from Outside using the Fortiweb?

Thank you in advance,

Regards

[Hosemacht]

Hi there,

just set up a simple static URL filter for your incoming traffic, works very well for me (i did this with a Fortigate not a Fortiweb

but should work similar).

But dont forget to also set a filter for the IP-Address.

Example: "mail.yourdomain.com/ecp"

  and       "123.123.123.123/ecp"  (change 123.123.123.123 to your IP)

Regards