STIGQter STIGQter: STIG Summary: Exchange 2010 Mailbox Server STIG Version: 1 Release: 10 Benchmark Date: 28 Jul 2017:

Email forwarding must be restricted.

DISA Rule

SV-44025r2_rule

Vulnerability Number

V-33605

Group Title

Exch-1-321

Rule Version

Exch-1-321

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Open the Exchange Management Shell and enter the following command:

Set-Mailbox -Identity <'UserWithForwardedAddress'> -ForwardingSMTPAdddress $null

Check Contents

Access Active Directory for mailbox enabled user accounts with the msExchGenericForwardingAddress attribute set. Obtain the Email Domain Security Plan (EDSP) and locate any accounts that have been authorized to have email auto-forwarded.

Open the Exchange Management Shell and enter the following commands:

Get-Mailbox -Filter {ForwardingSMTPAddress -ne $null}

If any user has a forwarding SMTP address and is not documented in the EDSP, this is a finding.

Note: If no remote SMTP domain matching the mail-enabled user or contact that allows forwarding is configured for users identified with a forwarding address, this function will not work properly. This requirement works with Exch-1-324.

Vulnerability Number

V-33605

Documentable

False

Rule Version

Exch-1-321

Severity Override Guidance

Access Active Directory for mailbox enabled user accounts with the msExchGenericForwardingAddress attribute set. Obtain the Email Domain Security Plan (EDSP) and locate any accounts that have been authorized to have email auto-forwarded.

Open the Exchange Management Shell and enter the following commands:

Get-Mailbox -Filter {ForwardingSMTPAddress -ne $null}

If any user has a forwarding SMTP address and is not documented in the EDSP, this is a finding.

Note: If no remote SMTP domain matching the mail-enabled user or contact that allows forwarding is configured for users identified with a forwarding address, this function will not work properly. This requirement works with Exch-1-324.

Check Content Reference

M

Target Key

1995

Comments