Skip to content

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • Exch-2-333

    <GroupDescription></GroupDescription>
    Group
  • Messages with malformed from address must be rejected.

    &lt;VulnDiscussion&gt;Sender Identification (SID) is an email anti-spam sanitization process. Sender ID uses DNS MX record lookups to verify the S...
    Rule Medium Severity
  • Exch-2-019

    <GroupDescription></GroupDescription>
    Group
  • Local machine policy must require signed scripts.

    &lt;VulnDiscussion&gt;Scripts often provide a way for attackers to infiltrate a system, especially those downloaded from untrusted locations. By ...
    Rule Medium Severity
  • Exch-2-330

    <GroupDescription></GroupDescription>
    Group
  • Block list service provider must be identified.

    &lt;VulnDiscussion&gt;Block List filtering is a sanitization process performed on email messages prior to their arrival at the destination mailbox....
    Rule Medium Severity
  • Exch-2-200

    <GroupDescription></GroupDescription>
    Group
  • SMTP automated banner response must not reveal server details.

    &lt;VulnDiscussion&gt;Automated connection responses occur as a result of FTP or Telnet connections, when connecting to those services. They report...
    Rule Medium Severity
  • Exch-2-201

    <GroupDescription></GroupDescription>
    Group
  • Outbound Connection Limit per Domain Count must be controlled.

    &lt;VulnDiscussion&gt;Email system availability depends in part on best practices strategies for setting tuning configurations. This configuration ...
    Rule Low Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules