Abuse Detection for ActiveSync
Idea shared by Chris Le - September 29, 2014 at 2:25 PM
It is becoming an increasing problem of users getting fired from their companies and they have an ActiveSync account on their phone relentlessly trying to login to our server. We would like to see a way to block these phones in the Abuse Detection settings.

1 Reply

Reply to Thread
Let me chime in on this one also.  Failed EAS logins will show up as ASP.NET 4.0 errors in the Event Viewer Application log, and they pretty much fill it up.  I have two users hitting this and there are hundreds of Events logged every day.  This is totally undesirable and it must be fixed.

I'm not sure that this should be treated as Abuse, but rather just treat it like anything involving POP3, IMAP and SMTP.  There's absolutely no reason why SmarterMail should be throwing ASP.NET errors on a failed EAS login.  I see no harm in them just being logged in the standard SmarterMail logs when this happens.

Reply to Thread