EWS and cookies? RRS feed

  • Question

  • Dear reader,

    I have many mac customers complaining there mac mail or outlook 2011 disconnects from exchange. People complaining are the persons that have mutliple email boxes connecting to the same exchange organisation trough Forefront UAG. After monitoring a bit i stumbled across the following error:

    Access was dinied for session <id number> on trunk <trunk name>. User <username> with source ip address <ip address> tried to access application Exchange 2010 sp1 - EWS that was restricted for the session. This might indicate an intrusion attempt by misusing the session cookie. I cannot find any specific info about this warning, but my feeling says it has something to wtih the disconnects that this user is complaining about.

    Best regards,

    Ruud Boersma

    MCITP Enterprise administrator

    Tuesday, March 10, 2015 11:15 AM