Skip to content

Microsoft Exchange 2016 Edge Transport Server Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The Exchange local machine policy must require signed scripts.

    Scripts, especially those downloaded from untrusted locations, often provide a way for attackers to infiltrate a system. By setting machine policy to prevent unauthorized script executions, unantic...
    Rule Medium Severity
  • SRG-APP-000213

    Group
  • SRG-APP-000219

    Group
  • Exchange internal Send connectors must use domain security (mutual authentication Transport Layer Security).

    The Simple Mail Transfer Protocol (SMTP) connector is used by Exchange to send and receive messages from server to server. Several controls work together to provide security between internal server...
    Rule Medium Severity
  • SRG-APP-000219

    Group
  • SRG-APP-000247

    Group
  • Exchange Outbound Connection Timeout must be 10 minutes or less.

    Email system availability depends in part on best practice strategies for setting tuning configurations. This configuration controls the number of idle minutes before the connection is dropped. It ...
    Rule Medium Severity
  • SRG-APP-000247

    Group
  • Exchange Outbound Connection Limit per Domain Count must be controlled.

    Email system availability depends in part on best practice strategies for setting tuning configurations. This configuration controls the maximum number of simultaneous outbound connections from a d...
    Rule Medium Severity
  • SRG-APP-000247

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules