Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Exchange must have the Microsoft Active Sync directory removed.
Description
Discussion Text
To reduce the vectors through which a server can be attacked, unneeded application components should be disabled or removed. By default, a virtual directory is installed for Active Sync, and the Exchange application default has Active Sync disabled.
If an attacker were to intrude into an Exchange CA server and reactivate Active Sync, this attack vector could once again be open, provided the virtual directory is present.
Once removed, the Active Sync functionality cannot be used without restoring the virtual directory, not a trivial process.
If an attacker were to intrude into an Exchange CA server and reactivate Active Sync, this attack vector could once again be open, provided the virtual directory is present.
Once removed, the Active Sync functionality cannot be used without restoring the virtual directory, not a trivial process.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.