Microsoft Exchange 2013 Edge Transport Server Security Technical Implementation Guide

The Microsoft Exchange 2013 Edge Transport Server Security Technical Implementation Guide (V1 R6) has 63 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

63STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R6

CurrentPublished Wed Jul 24 2024

Exchange must have accepted domains configured.

Microsoft Exchange 2013 Edge Transport Server Security Technical Implementation Guide

Assessment Title

Rule Text

Exchange must have accepted domains configured.

Description

Discussion Text

Exchange may be configured to accept email for multiple domain names. This setting identifies the domains for which the server will accept mail. This check verifies the email server is not accepting email for unauthorized domains.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-234704

Rule

SV-234704r960801_rule

Severity

medium

Rule Version

EX13-EG-000015

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the Email Domain Security Plan (EDSP).

Determine the Accepted Domain values.  

Open the Exchange Management Shell and enter the following command:
 
Get-AcceptedDomain | Select Name, DomainName, Identity, Default

If the Default value is not set to True, this is a finding.

or

If the Default value for AcceptedDomains is set to another value other than True and has signoff and risk acceptance in the EDSP, this is not a finding.

Implementation Procedure

Fix Text

Update the EDSP.

Open the Exchange Management Shell and enter the following command:
 
Set-AcceptedDomain -Identity <'IdentityName'> -MakeDefault $true

Note: The <IdentityName> value must be in quotes.

STIG check 3 of 63 in the Microsoft Exchange 2013 Edge Transport Server STIG checklist

← Previous · V-234703Exchange servers must use approved DoD certificates.Next · V-234705 →Exchange external Receive connectors must be domain secure-enabled.