Home
Security Hardening
DISA Microsoft Exchange 2016 Edge Transport Server STIG V2R2

DISA Microsoft Exchange 2016 Edge Transport Server STIG V2R2

EX16-ED-000510 – The Exchange Simple Mail Transfer Protocol (SMTP) IP Allow List Connection filter must be enabled.
Details Email system availability depends in part on best practice strategies for setting tuning configurations. Careful tuning reduces the risk...
EX16-ED-000520 – The Exchange Simple Mail Transfer Protocol (SMTP) Sender filter must be enabled.
Details Email system availability depends in part on best practices strategies for setting tuning configurations. Careful tuning reduces the risk...
EX16-ED-000530 – Exchange must have antispam filtering installed.
Details Originators of spam messages are constantly changing their techniques in order to defeat spam countermeasures; therefore, spam software must...
EX16-ED-000410 – The Exchange Spam Evaluation filter must be enabled.
Details By performing filtering at the perimeter, up to 90 percent of spam, malware, and other undesirable messages may be...
EX16-ED-000420 – The Exchange Block List service provider must be identified.
Details Block List filtering is a sanitization process performed on email messages prior to their arrival at the destination mailbox....
EX16-ED-000430 – Exchange messages with a malformed From address must be rejected.
Details Sender Identification (SID) is an email antispam sanitization process. Sender ID uses DNS MX record lookups to verify the...
EX16-ED-000470 – The Exchange Recipient filter must be enabled.
Details Email system availability depends in part on best practice strategies for setting tuning configurations. Careful tuning reduces the risk...
EX16-ED-000480 – The Exchange tarpitting interval must be set.
Details Tarpitting is the practice of artificially delaying server responses for specific Simple Mail Transfer Protocol (SMTP) communication patterns that...
EX16-ED-000490 – Exchange internal Receive connectors must not allow anonymous connections.
Details This control is used to limit the servers that may use this server as a relay. If a Simple...
EX16-ED-000500 – Exchange Simple Mail Transfer Protocol (SMTP) IP Allow List entries must be empty.
Details Email system availability depends in part on best practice strategies for setting tuning configurations. Careful tuning reduces the risk...

DISA Microsoft Exchange 2016 Edge Transport Server STIG V2R2

EX16-ED-000510 – The Exchange Simple Mail Transfer Protocol (SMTP) IP Allow List Connection filter must be enabled.

EX16-ED-000520 – The Exchange Simple Mail Transfer Protocol (SMTP) Sender filter must be enabled.

EX16-ED-000530 – Exchange must have antispam filtering installed.

EX16-ED-000410 – The Exchange Spam Evaluation filter must be enabled.

EX16-ED-000420 – The Exchange Block List service provider must be identified.

EX16-ED-000430 – Exchange messages with a malformed From address must be rejected.

EX16-ED-000470 – The Exchange Recipient filter must be enabled.

EX16-ED-000480 – The Exchange tarpitting interval must be set.

EX16-ED-000490 – Exchange internal Receive connectors must not allow anonymous connections.

EX16-ED-000500 – Exchange Simple Mail Transfer Protocol (SMTP) IP Allow List entries must be empty.