Skip to content

Microsoft Exchange 2019 Edge Server Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000261

    <GroupDescription></GroupDescription>
    Group
  • Exchange must have anti-spam filtering enabled.

    &lt;VulnDiscussion&gt;Originators of spam messages are constantly changing their techniques to defeat spam countermeasures; therefore, spam softwar...
    Rule Medium Severity
  • SRG-APP-000261

    <GroupDescription></GroupDescription>
    Group
  • Exchange must have anti-spam filtering configured.

    &lt;VulnDiscussion&gt;Originators of spam messages are constantly changing their techniques to defeat spam countermeasures; therefore, spam softwar...
    Rule Medium Severity
  • SRG-APP-000261

    <GroupDescription></GroupDescription>
    Group
  • Exchange Sender Identification Framework must be enabled.

    &lt;VulnDiscussion&gt;Email is only as secure as the recipient. When the recipient is an email server accepting inbound messages, authenticating th...
    Rule Medium Severity
  • SRG-APP-000295

    <GroupDescription></GroupDescription>
    Group
  • Exchange must limit the Receive connector timeout.

    &lt;VulnDiscussion&gt;Email system availability depends in part on best practices strategies for setting tuning. This configuration controls the nu...
    Rule Medium Severity
  • SRG-APP-000340

    <GroupDescription></GroupDescription>
    Group
  • The Exchange Edge server must point to a trusted list of DNS servers for external and internal resolution.

    &lt;VulnDiscussion&gt;To mitigate the risk of possible erroneous queries that may have been coopted by bad actors, the Exchange Edge server must us...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules