SFB project experience-81-restrict access to ECP internally and externally

Customer requirements:

Exchange 2016 restricts access to https://mail.contoso.com/ECP within and outside the enterprise. Only the management segment can access the ECP.

Solution:

1) after looking for a special method on the Internet, we can restrict it through the command line, but after the restriction, everything inside and outside the enterprise cannot be accessed. If you want to access it within the enterprise, you need to create a new / ECP directory and then restrict it, then consider that this modification method has a greater impact and is temporarily abandoned.

2) the customer finally increases the IP address allowed to be accessed by the network by modifying the IP Address and Domain Restrictions in the IIS.

For example:

A.127.0.0.1 .

b. Manage the network IP segment.

3) after the above configuration, only the management network segment and the local machine can be accessed, and nothing else can be accessed.