Well, the "403 forbidden" really speaks for itself -- this is the response from the server.
Aqua does not make up random URLs and server names because it wants to
so it had to have been a server side change.
The standard URL for EWS is https://<server>/EWS/Exchange.asmx
This one doesn't even open in my desktop browser:
https://ipmm.next.co.uk/EWS/Exchange.asmxIn Chrome, I get a "This webpage is not available".
It's so nice for your IT guys to say they "don't support Android phones".