Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Public Folder virtual directory must be removed if not in use by the site.
Description
Discussion Text
To reduce the vectors through which a server can be attacked, unneeded application components should be disabled or removed.
By default, a virtual directory is installed for Public Folders. If an attacker were to intrude into an Exchange CA server and be able to access the public folder web site, it would provide an additional attack vector, provided the virtual directory was present.
Once removed, the Public functionality cannot be used without restoring the virtual directory.
By default, a virtual directory is installed for Public Folders. If an attacker were to intrude into an Exchange CA server and be able to access the public folder web site, it would provide an additional attack vector, provided the virtual directory was present.
Once removed, the Public functionality cannot be used without restoring the virtual directory.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.