Check Point and the EWS retirement
Microsoft Graph migration status from Check Point's own notices. Last checked 2026-10-25.
Check Point Email Security (formerly Avanan, Harmony Email and Collaboration)
- Status
- Moved to Microsoft Graph
- Date
- 2026-09-23
“Check Point Email Security now protects Microsoft 365 mail without the Exchange Web Services (EWS) full access permission.”
Exchange Web Services API Permissions - No Longer Required - Check Point Blog (2026-09-23), read 2026-10-25.
What to do. New customers are not asked for the EWS full_access_as_app permission. Existing customers keep it until removed, and removing it is optional. To remove it, delete the permission in the Check Point Azure app, or re-authorize the app under Security Settings > SaaS Applications > Microsoft 365 Mail. No change to protection.
One email from ewsappid.com each time a status on this page changes, nothing else, and none after 1 April 2027. Every alert has an unsubscribe link; one press deletes your address, or write to support@ewsappid.com at any time. Sender details are on the contact page; see the privacy policy.
Application IDs
This site lists no fixed application ID for Check Point. Look up an ID from your EWS usage report on the home page, or find the name behind it in Entra, under Enterprise applications.
Every app in your tenant
The tenant plan reads your EWS usage report in your browser and matches each app against these statuses and your current allow list. All vendor statuses.