2 ms·
It's been a while since I managed Exchange on-prem solutions, but it's quite rare to have an Exchange server listening directly on the internet. They were almos
by amanzi 3y ago
It's been a while since I managed Exchange on-prem solutions, but it's quite rare to have an Exchange server listening directly on the internet. They were almost always behind security gateways which mitigated most, if not all, of these kind of remote exploit attacks. Also, it seems that most of these exploits require authentication which would hopefully be mitigated by implementing MFA.
- ocdtrekkie 3y agoSmaller orgs tend to get hit the hardest on these sorts of things, because the licensing for additional things like Edge Transport servers is harder to swallow, and they tend to have less fancy firewalls that are a bit dumber. Not every gateway can detect what a known exploit looks like.
- pelasaco 3y agoI had always exchange on-prem running behind a postfix or qmail. You block all the internet traffic from your exchange and to your exchange. Thats network security 101, regardless of the company size.
- alwaysrunning 3y agoExpect if you are married to the POTUS, well technically it wasn't exchange. https://apnews.com/467ff78858bf4dde8db21677deeff101 https://apnews.com/467ff78858bf4dde8db21677deeff101