Home
Security Hardening
DISA Microsoft Exchange 2013 Client Access Server STIG V1R3

DISA Microsoft Exchange 2013 Client Access Server STIG V1R3

EX13-CA-000135 – Exchange Outlook Anywhere (OA) clients must use NTLM authentication to access email.
Details Identification and authentication provide the foundation for access control. Access to email services applications requires NTLM authentication. Outlook Anywhere,...
EX13-CA-000060 – Exchange must have Send Fatal Errors to Microsoft disabled.
Details Log files help establish a history of activities, and can be useful in detecting attack attempts or determining tuning...
EX13-CA-000140 – Exchange software must be installed on a separate partition from the OS.
Details In the same way that added security layers can provide a cumulative positive effect on security posture, multiple applications...
EX13-CA-000065 – Exchange must have Audit data protected against unauthorized read access.
Details Log files help establish a history of activities, and can be useful in detecting attack attempts or determining tuning...
EX13-CA-000145 – Exchange must provide redundancy.
Details Load balancing is a way to manage which Exchange servers receive traffic. Load balancing helps distribute incoming client connections...
EX13-CA-000070 – Exchange must not send Customer Experience reports to Microsoft.
Details It is detrimental for applications to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary...
EX13-CA-000150 – Exchange OWA must use https – External
Details Without protection of the transmitted information, confidentiality and integrity may be compromised since unprotected communications can be intercepted and...
EX13-CA-000075 – Exchange must have Audit data protected against unauthorized modification.
Details Log files help establish a history of activities, and can be useful in detecting attack attempts or determining tuning...
EX13-CA-000150 – Exchange OWA must use https – Internal
Details Without protection of the transmitted information, confidentiality and integrity may be compromised since unprotected communications can be intercepted and...
EX13-CA-000080 – Exchange must have audit data protected against unauthorized deletion.
Details Log files help establish a history of activities, and can be useful in detecting attack attempts or determining tuning...

Prev Next

DISA Microsoft Exchange 2013 Client Access Server STIG V1R3

EX13-CA-000135 – Exchange Outlook Anywhere (OA) clients must use NTLM authentication to access email.

EX13-CA-000060 – Exchange must have Send Fatal Errors to Microsoft disabled.

EX13-CA-000140 – Exchange software must be installed on a separate partition from the OS.

EX13-CA-000065 – Exchange must have Audit data protected against unauthorized read access.

EX13-CA-000145 – Exchange must provide redundancy.

EX13-CA-000070 – Exchange must not send Customer Experience reports to Microsoft.

EX13-CA-000150 – Exchange OWA must use https – External

EX13-CA-000075 – Exchange must have Audit data protected against unauthorized modification.

EX13-CA-000150 – Exchange OWA must use https – Internal

EX13-CA-000080 – Exchange must have audit data protected against unauthorized deletion.