Exchange autodiscover and public IP disclose exchange server IP details

Kosala Randika Paranathala 66 Reputation points
2022-09-07T12:42:07.28+00:00

Hi,

Our exchange server's local IP address will disclose through the autodiscover and public IP, someone do a scan for the exchange autodiscover and public IP then they will see the local IP of the exchange server, how do we mitigate this issue?

Currently, our Exchange servers are patched up to Exchange 2016 CU 22 (one behind the latest) + Latest SU (released in August).

Internet Information Services
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,175 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,349 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,720 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 43,931 Reputation points
    2022-09-16T07:40:07.38+00:00

    Hi KosalaRandika-9232,

    You can try the following command to prevent this from happening:

    appcmd.exe set config -section:system.webServer/serverRuntime /alternateHostName:"DESIRED ALIAS" /commit:apphost

    -------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--

    1 person found this answer helpful.
    0 comments
  2. Andy David - MVP 141.6K Reputation points MVP
    2022-09-07T12:59:04.843+00:00

    Can you require all users to use a VPN to access Exchange and block 443 externally?