Exchange 2010 Mailbox Server STIG
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Email Subject Line logging must be disabled.
Log files help establish a history of activities, and can be useful in detecting attack attempts or determining tuning adjustments to improve availability. When “message tracking” is enabled, only...Rule Medium Severity -
Exchange must not send Customer Experience reports to Microsoft.
Log files help establish a history of activities, and can be useful in detecting attack attempts or determining tuning adjustments to improve availability. This setting enables an automated entry t...Rule Medium Severity -
Exchange software baseline copy must exist.
Exchange software, as with other application software installed on a host system, must be included in a system baseline record and periodically reviewed; otherwise unauthorized changes to the soft...Rule Medium Severity -
Services must be documented and unnecessary services must be removed or disabled.
Unneeded, but running, services offer attackers an enhanced attack profile, and attackers are constantly watching to discover open ports with running services. By analyzing and disabling unneeded...Rule Medium Severity -
Email servers must have Email aware virus protection.
With the proliferation of trojans, viruses, and SPAM attaching themselves to email messages (or attachments), it is necessary to have capable email Aware Anti-Virus (AV) products to scan messages a...Rule High Severity -
Email forwarding SMTP domains must be restricted.
Auto-forwarded email accounts do not meet the requirement for digital signature and encryption of CUI and PII IAW DoDI 8520.2 (reference ee) and DoD Director for Administration and Management memor...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules