Messageware EPG for
Exchange Server Security

Password attacks across all Exchange protocols are intelligently identified and automatically stopped, preventing legitimate user accounts from being locked or passwords guessed. Simultaneously, it isolates incoming attack sources putting a stop to any additional malicious activity.

Restrict access based on countries and geographical locations. Utilizing EPG’s real-time threat feeds, devices recognized as malicious are immediately banned. But, why wait and permit potentially harmful connections from geo-locations where your organization lacks offices or employees? Effortlessly choose and implement geographic banning rules for your Exchange Servers.

Identify and stop brute force attacks. Brute forcing triggers mass Active Directory lockouts that prevent all affected users from logging on. Brute forcing steals logon credentials that are then used in attacks on the whole network.

Identify and stop targeted persistent password guessing attacks. LVA-ATP attacks evade traditional detection by attacking below Active Directory lockout thresholds. LVA-ATP attacks steal high-value logon credentials to target critical systems and data.

Threat data feeds provide highly accurate, real-time data to ensure connections are not from malicious sources, vulnerability probing, or compromised users. Verify the legitimacy of all connection requests and ensure only legitimate corporate users are connecting.

Many popular Multifactor Factor Solutions, such as DUO, do not protect Exchange Services such as EWS, ActiveSync and Autodiscover. By combining 2FA and EPG, all key Exchange Services will be secured.

For organizations without multi-factor for OWA , EPG provides Dynamic CAPTCHA. With configurable security triggers, Dynamic CAPTCHA enhances Outlook Web and ECP logon pages to challenge users and bots.

Fully integrated with SQL reporting, built-in and custom reports provide high-level views of  all connections to the Exchange Server. Easily drill down to raw data to investigate the health of the system and the impact of any security incidents.

Password failure alerts, blocked connections digests, and summary reports can be configured to automatically provide the security team with key data to proactively manage the environment. Delays in detection and response are costly.

EPG maintains a lockout system independent of active directory. This eliminates the need for constant password resets that can occur during brute force and password spray attacks.

Configure EPG to comply with and enforce corporate security policies.