Exchange Protocol Guard (EPG) is a security solution designed to protect on-premises Microsoft Exchange Server environments by monitoring and securing nine widely used messaging protocols. It collects real-time logon information to analyze threats, detect vulnerability probing, and implement access controls for services including EWS, ActiveSync, Autodiscover, Outlook Web (OWA), and the Exchange Control Panel (ECP).
The system operates an independent lockout mechanism to prevent mass Active Directory lockouts caused by high-volume brute force and password spray attacks. It also detects low-volume persistent password-guessing threats that evade traditional thresholds, utilizes real-time threat data feeds for geolocation banning, and deploys dynamic CAPTCHA configurations to mitigate automated bot activity.
