EX13-MB-000080 – Exchange Audit data must be on separate partitions.
Details Log files help establish a history of activities and can be useful in detecting attack attempts or determining tuning...
- Home
- Security Hardening
- DISA Microsoft Exchange 2013 Mailbox Server STIG V2R1
DISA Microsoft Exchange 2013 Mailbox Server STIG V2R1
EX13-MB-000085 – Exchange Local machine policy must require signed scripts.
Details Scripts often provide a way for attackers to infiltrate a system, especially those downloaded from untrusted locations. By setting...EX13-MB-000090 – The Exchange IMAP4 service must be disabled.
Details The IMAP4 protocol is not approved for use within the DoD. It uses a clear-text-based user name and password...EX13-MB-000095 – The Exchange POP3 service must be disabled.
Details The POP3 protocol is not approved for use within the DoD. It uses a clear-text-based user name and password...EX13-MB-000100 – Exchange Mailbox databases must reside on a dedicated partition.
Details In the same way that added security layers can provide a cumulative positive effect on security posture, multiple applications...EX13-MB-000105 – Exchange Internet-facing Send connectors must specify a Smart Host.
Details When identifying a ‘Smart Host’ for the email environment, a logical Send connector is the preferred method. A Smart...EX13-MB-000110 – Exchange internal Receive connectors must require encryption.
Details The Simple Mail Transfer Protocol (SMTP) Receive connector is used by Exchange to send and receive messages from server...EX13-MB-000035 – Exchange Circular Logging must be disabled.
Details Logging provides a history of events performed and can also provide evidence of tampering or attack. Failure to create...EX13-MB-000115 – Exchange internal Receive connectors must use Domain Security (mutual authentication Transport Layer Security) – mutual authentication Transport Layer Security.
Details The Simple Mail Transfer Protocol (SMTP) connector is used by Exchange to send and receive messages from server to...EX13-MB-000040 – Exchange Email Subject Line logging must be disabled.
Details Log files help establish a history of activities and can be useful in detecting attack attempts or determining tuning...