Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Exchange 2010 Client Access Server STIG

The Exchange 2010 Client Access Server STIG (V1 R9) has 28 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

28STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R9

CurrentPublished Fri Jan 27 2017

The current, approved service pack must be installed.

Exchange 2010 Client Access Server STIG

Assessment Title

Rule Text

Description

Discussion Text

Failure to install the most current Exchange service pack leaves a system vulnerable to exploitation. Current service packs correct known security and system vulnerabilities.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-33629

Rule

SV-44049r3_rule

Severity

medium

Rule Version

Exch-3-814

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Open the Exchange Management Shell and enter the following command:

Get-ExchangeServer | fl name, AdminDisplayVersion

If the value of 'AdminDisplayVersion' does not return Version 14.2 (Build 247.5) or greater, this is a finding.

Implementation Procedure

Fix Text

Update the system with the latest approved service pack or a supported release.

STIG check 24 of 28 in the Exchange 2010 Client Access Server STIG checklist

← Previous · V-33626Servers must use approved DoD certificates.Next · V-33632 →Local machine policy must require signed scripts.