continous querry from Microsoft Datacenter ip-adressen to microsoft-server-activesync

%3CLINGO-SUB%20id%3D%22lingo-sub-1612881%22%20slang%3D%22en-US%22%3Econtinous%20querry%20from%20Microsoft%20Datacenter%20ip-adressen%20to%20microsoft-server-activesync%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1612881%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20someone%20explain%20the%20following.%3C%2FP%3E%3CP%3EWe%20have%20a%20hybrid%20exchange%202016%20configuration.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20see%20on%20our%20Web%20Application%20firewall%20continuous%20logs%20from%20connecting%20to%20out%20activesync%26nbsp%3B%20webservice%20from%20microsoft%20Datacenters%20ip's%20over%20Europe.%20Users%20are%20mentioned%20who%20have%20outlook%20on%20there%20Iphone%20and%20the%20mailbox%20is%20onpemise.%3CBR%20%2F%3E%3CBR%20%2F%3EThe%20querry%20string%20is%20cmd%3Dping%26amp%3BUser%3D%3CSTRONG%3E%3CDOMAINNAME%3E%3C%2FDOMAINNAME%3E%3C%2FSTRONG%3E%255C%3CSTRONG%3E%3CUSERNAME%3E%3C%2FUSERNAME%3E%3C%2FSTRONG%3E%24DeviceID%3D%3CSTRONG%3E%3CDEVICEID%3E%3C%2FDEVICEID%3E%3C%2FSTRONG%3E%26amp%3BDevicetype%3Doutlook%3CBR%20%2F%3E%3CBR%20%2F%3ECan%20someone%20explain%20this%20to%20me%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1612881%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3E2016%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Ehybrid%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Contributor

Can someone explain the following.

We have a hybrid exchange 2016 configuration.

 

We see on our Web Application firewall continuous logs from connecting to out activesync  webservice from microsoft Datacenters ip's over Europe. Users are mentioned who have outlook on there Iphone and the mailbox is onpemise.

The querry string is cmd=ping&User=<domainname>%5C<username>$DeviceID=<DeviceID>&Devicetype=outlook

Can someone explain this to me




0 Replies