Details

If this setting is enabled then you will not be able to configure mutual authentication TLS, referred to as ‘External send connector authentication: Domain Security’ in this baseline.

Rationale:

Basic authentication sends credentials across the network in plaintext. TLS helps protect credentials from interception by unauthorized users.

Solution

To implement the recommended state, execute the following PowerShell cmdlet:

set-SendConnector -identity -IgnoreSTARTTLS: $false

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1514

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Windows.

References

• 800-53|SC-13

Source

• Tenable.com/audits