Skip to content

II - Mission Support Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000247

    <GroupDescription></GroupDescription>
    Group
  • Exchange Message size restrictions must be controlled on Send connectors.

    &lt;VulnDiscussion&gt;Email system availability depends in part on best practice strategies for setting tuning configurations. For message size res...
    Rule Low Severity
  • SRG-APP-000247

    <GroupDescription></GroupDescription>
    Group
  • The Exchange Send connector connections count must be limited.

    &lt;VulnDiscussion&gt;The Exchange Send connector setting controls the maximum number of simultaneous outbound connections allowed for a given SMTP...
    Rule Low Severity
  • SRG-APP-000247

    <GroupDescription></GroupDescription>
    Group
  • The Exchange global inbound message size must be controlled.

    &lt;VulnDiscussion&gt;Email system availability depends in part on best practice strategies for setting tuning configurations. Message size limits ...
    Rule Low Severity
  • SRG-APP-000247

    <GroupDescription></GroupDescription>
    Group
  • The Exchange global outbound message size must be controlled.

    &lt;VulnDiscussion&gt;Email system availability depends in part on best practice strategies for setting tuning configurations. Message size limits ...
    Rule Low Severity
  • SRG-APP-000247

    <GroupDescription></GroupDescription>
    Group
  • The Exchange Outbound Connection Limit per Domain Count must be controlled.

    &lt;VulnDiscussion&gt;Email system availability depends in part on best practice strategies for setting tuning configurations. This configuration c...
    Rule Low Severity
  • SRG-APP-000247

    <GroupDescription></GroupDescription>
    Group
  • The Exchange Outbound Connection Timeout must be 10 minutes or less.

    &lt;VulnDiscussion&gt;Email system availability depends in part on best practice strategies for setting tuning configurations. This configuration c...
    Rule Low Severity
  • SRG-APP-000261

    <GroupDescription></GroupDescription>
    Group
  • Exchange Internal Receive connectors must not allow anonymous connections.

    &lt;VulnDiscussion&gt;This control is used to limit the servers that may use this server as a relay. If a Simple Mail Transport Protocol (SMTP) sen...
    Rule Medium Severity
  • SRG-APP-000261

    <GroupDescription></GroupDescription>
    Group
  • Exchange external/Internet-bound automated response messages must be disabled.

    &lt;VulnDiscussion&gt;Spam originators, in an effort to refine mailing lists, sometimes monitor transmissions for automated bounce-back messages. A...
    Rule Medium Severity
  • SRG-APP-000261

    <GroupDescription></GroupDescription>
    Group
  • Exchange must have antispam filtering installed.

    &lt;VulnDiscussion&gt;Originators of spam messages are constantly changing their techniques in order to defeat spam countermeasures; therefore, spa...
    Rule Medium Severity
  • SRG-APP-000261

    <GroupDescription></GroupDescription>
    Group
  • Exchange must have antispam filtering enabled.

    &lt;VulnDiscussion&gt;Originators of spam messages are constantly changing their techniques in order to defeat spam countermeasures; therefore, spa...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules