question

RonaldNL-5389 avatar image
0 Votes"
RonaldNL-5389 asked AndyDavid commented

Exchange (meeting) updates done in United States ?

Our tenant services are all located in European Union. In the cloud app security we get Alerts about Impossible travel activity. If we look at them we see activity from the United states by Exchange Online from Microsoft in the United States why is that and why is our Exchange traffic going to the USA if all services are located in Europe ?

office-exchange-online-itpro
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Sure its not just legitimate logons? VPN or connected through the US servers?
Have you asked a flagged user?

Alternatively, ensure its not really compromised.

0 Votes 0 ·
RonaldNL-5389 avatar image
0 Votes"
RonaldNL-5389 answered RonaldNL-5389 edited

the exchange service is in European Union, most of them show our location in Europe and some actions are done by exchange online US

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RonaldNL-5389 avatar image
0 Votes"
RonaldNL-5389 answered RonaldNL-5389 commented

No the screen above is from one singe user that cannot be on two places
and the actions in the USA are always from the exchange server in USA

User is not really compromised. We see the same on all other users so it looks like Microsoft Exchange Online is doing something in the US
but what ? EOP or ATP ? or is that also done in Europe

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Right, did you ask that user about it? Are they potentially compromised?

0 Votes 0 ·

NO they are not (potentially compromised)
The traffic is only from Microsoft Online Exchange in US not from other source

0 Votes 0 ·