Skip to content

Microsoft Exchange 2013 Mailbox Server Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000261

    <GroupDescription></GroupDescription>
    Group
  • Exchange must have antispam filtering configured.

    &lt;VulnDiscussion&gt;Originators of spam messages are constantly changing their techniques in order to defeat spam countermeasures; therefore, spa...
    Rule Medium Severity
  • SRG-APP-000261

    <GroupDescription></GroupDescription>
    Group
  • Exchange must not send automated replies to remote domains.

    &lt;VulnDiscussion&gt;Attackers can use automated messages to determine whether a user account is active, in the office, traveling, and so on. An a...
    Rule Medium Severity
  • SRG-APP-000261

    <GroupDescription></GroupDescription>
    Group
  • Exchange servers must have an approved DoD email-aware virus protection software installed.

    &lt;VulnDiscussion&gt;With the proliferation of trojans, viruses, and spam attaching themselves to email messages (or attachments), it is necessary...
    Rule High Severity
  • SRG-APP-000261

    <GroupDescription></GroupDescription>
    Group
  • The Exchange Global Recipient Count Limit must be set.

    &lt;VulnDiscussion&gt;Email system availability depends in part on best practice strategies for setting tuning configurations. The Global Recipient...
    Rule Low Severity
  • SRG-APP-000295

    <GroupDescription></GroupDescription>
    Group
  • The Exchange Receive connector timeout must be limited.

    &lt;VulnDiscussion&gt;Email system availability depends in part on best practice strategies for setting tuning. This configuration controls the num...
    Rule Low Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules