For POP and IMAP access to Exchange Server mailboxes the best practice is to require secure logins.
FAQ: Configuring a Mailbox to Allow Only POP3 Access
How to configure an Exchange or Office 365 mailbox to only be accessible using the POP3 protocol.