Capacity
CCI-001308
Automatically update spam protection mechanisms on an organization-defined frequency.
2
Rule
Severity: Medium
The ALG that implements spam protection mechanisms must be updated automatically.
1
Rule
Severity: Medium
Microsoft Defender AV must be configured to check for definition updates daily.
2
Rule
Severity: Medium
Exchange Internal Receive connectors must not allow anonymous connections.
2
Rule
Severity: Medium
Exchange external/Internet-bound automated response messages must be disabled.
3
Rule
Severity: Medium
Exchange must have antispam filtering installed.
3
Rule
Severity: Medium
Exchange must have antispam filtering enabled.
3
Rule
Severity: Medium
Exchange must have antispam filtering configured.
4
Rule
Severity: Medium
Exchange must not send automated replies to remote domains.
2
Rule
Severity: High
Exchange servers must have an approved DoD email-aware virus protection software installed.
4
Rule
Severity: Low
The Exchange Global Recipient Count Limit must be set.
4
Rule
Severity: Medium
Exchange messages with a blank sender field must be rejected.
4
Rule
Severity: Medium
Exchange messages with a blank sender field must be filtered.
4
Rule
Severity: Medium
Exchange filtered messages must be archived.
2
Rule
Severity: Medium
The Exchange Sender filter must block unaccepted domains.
4
Rule
Severity: Medium
Exchange nonexistent recipients must not be blocked.
4
Rule
Severity: Medium
The Exchange Sender Reputation filter must be enabled.
4
Rule
Severity: Medium
The Exchange Sender Reputation filter must identify the spam block level.
4
Rule
Severity: Medium
Exchange Attachment filtering must remove undesirable attachments by file type.
4
Rule
Severity: Medium
The Exchange Spam Evaluation filter must be enabled.
4
Rule
Severity: Medium
The Exchange Block List service provider must be identified.
1
Rule
Severity: Medium
Exchange messages with malformed From address must be rejected.
4
Rule
Severity: Medium
The Exchange Recipient filter must be enabled.
4
Rule
Severity: Medium
The Exchange tarpitting interval must be set.
4
Rule
Severity: Medium
Exchange internal Receive connectors must not allow anonymous connections.
4
Rule
Severity: Medium
Exchange Simple Mail Transfer Protocol (SMTP) IP Allow List entries must be empty.
4
Rule
Severity: Medium
The Exchange Simple Mail Transfer Protocol (SMTP) IP Allow List Connection filter must be enabled.
4
Rule
Severity: Medium
The Exchange Simple Mail Transfer Protocol (SMTP) Sender filter must be enabled.
4
Rule
Severity: Medium
Exchange Sender Identification Framework must be enabled.
5
Rule
Severity: Medium
Exchange must have anti-spam filtering installed.
5
Rule
Severity: Medium
Exchange must have anti-spam filtering enabled.
5
Rule
Severity: Medium
Exchange must have anti-spam filtering configured.
2
Rule
Severity: High
Exchange servers must have an approved DOD email-aware virus protection software installed.
2
Rule
Severity: Medium
Exchange internal receive connectors must not allow anonymous connections.
2
Rule
Severity: Medium
Exchange external/internet-bound automated response messages must be disabled.
3
Rule
Severity: Medium
Exchange messages with a malformed From address must be rejected.
1
Rule
Severity: High
Exchange must render hyperlinks from email sources from non-.mil domains as unclickable.
2
Rule
Severity: Medium
Active hyperlinks in messages from non .mil domains must be rendered unclickable.
2
Rule
Severity: Medium
The Exchange sender filter must block unaccepted domains.
Patternfly
PatternFly elements
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Modules