1. Home
  2. Security Hardening
  3. CIS Microsoft Exchange Server 2016 Edge V1.0.0
  4. Set ‘Turn on Connectivity logging’ to ‘True’

Set ‘Turn on Connectivity logging’ to ‘True’

Details

A connectivity log is a record of the SMTP connection activity of the outbound message delivery queues to the destination Mailbox server, smart host, or domain. Connectivity logging is available on Hub Transport servers and Edge Transport servers. By default, connectivity logging is disabled.

Rationale:

If events are not recorded it may be difficult or impossible to determine the root cause of system problems or the unauthorized activities of malicious users.

Solution

To implement the recommended state, execute the following PowerShell cmdlet:

Set-TransportService EXCHANGE1 -ConnectivityLogEnabled $true

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Windows.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles