Blog Post

Exchange Team Blog
4 MIN READ

Released: August 2022 Exchange Server Security Updates

The_Exchange_Team's avatar
The_Exchange_Team
Icon for Microsoft rankMicrosoft
Aug 09, 2022
Microsoft has released security updates (SUs) for vulnerabilities found in: Exchange Server 2013 Exchange Server 2016 Exchange Server 2019 IMPORTANT: Updates are released in a self-extrac...
Updated Aug 11, 2022
Version 8.0
announcements
security
setup
ClimbGuy's avatar
ClimbGuy
Copper Contributor
Oct 05, 2022

After enabling Extended Protection on 2019 - I ran the health check script to check everything was good and it's now reporting the following:

 

CVE-2022-24516, CVE-2022-21979, CVE-2022-21980, CVE-2022-24477, CVE-2022-30134
Extended Protection should be set to 'None' on the vDir where IP filtering is enabledExtended Protection isn't configured as expected.

IPs in filter list on vDir: 'Default Web Site/ECP'
IPs in filter list on vDir: 'Default Web Site/OWA'

 

Should we really revert the Extended Protection settings from the vDir's because of IP filtering?  Please advise to the correct way to handle this.  I'm curious as to the why as well if someone knows.

 

Thank you!