CCI-001308

Automatically update spam protection mechanisms on an organization-defined frequency.

1 rule found Severity: Medium

2 rules found Severity: Medium

3 rules found Severity: Medium

2 rules found Severity: High

3 rules found Severity: Low

3 rules found Severity: Medium

2 rules found Severity: Medium

3 rules found Severity: Medium

1 rule found Severity: Medium

3 rules found Severity: Medium

1 rule found Severity: Medium

2 rules found Severity: Medium

3 rules found Severity: Medium

1 rule found Severity: High

1 rule found Severity: Medium

CCI-001308

Microsoft Defender AV must be configured to check for definition updates daily.

Exchange Internal Receive connectors must not allow anonymous connections.

Exchange external/Internet-bound automated response messages must be disabled.

Exchange must have antispam filtering installed.

Exchange must have antispam filtering enabled.

Exchange must have antispam filtering configured.

Exchange must not send automated replies to remote domains.

Exchange servers must have an approved DoD email-aware virus protection software installed.

The Exchange Global Recipient Count Limit must be set.

Exchange messages with a blank sender field must be rejected.

Exchange messages with a blank sender field must be filtered.

Exchange filtered messages must be archived.

The Exchange Sender filter must block unaccepted domains.

Exchange nonexistent recipients must not be blocked.

The Exchange Sender Reputation filter must be enabled.

The Exchange Sender Reputation filter must identify the spam block level.

Exchange Attachment filtering must remove undesirable attachments by file type.

The Exchange Spam Evaluation filter must be enabled.

The Exchange Block List service provider must be identified.

Exchange messages with malformed From address must be rejected.

The Exchange Recipient filter must be enabled.

The Exchange tarpitting interval must be set.

Exchange internal Receive connectors must not allow anonymous connections.

Exchange Simple Mail Transfer Protocol (SMTP) IP Allow List entries must be empty.

The Exchange Simple Mail Transfer Protocol (SMTP) IP Allow List Connection filter must be enabled.

The Exchange Simple Mail Transfer Protocol (SMTP) Sender filter must be enabled.

Exchange Sender Identification Framework must be enabled.

The ALG that implements spam protection mechanisms must be updated automatically.

Active hyperlinks in messages from non .mil domains must be rendered unclickable.

The Exchange sender filter must block unaccepted domains.

Exchange messages with a malformed From address must be rejected.

Exchange must have anti-spam filtering installed.

Exchange must have anti-spam filtering enabled.

Exchange must have anti-spam filtering configured.

Exchange must render hyperlinks from email sources from non-.mil domains as unclickable.

Exchange servers must have an approved DOD email-aware virus protection software installed.

Exchange internal receive connectors must not allow anonymous connections.

Exchange external/internet-bound automated response messages must be disabled.