SV-228573r508658_rule
V-228573
SRG-APP-000141-WSR-000075
IISW-SV-000161
CAT II
10
Configure the relay server with a specific allowed IP address, from the same network as the relay, and implement TLS.
Interview the System Administrator about the role of the IIS 8.5 web server.
If the IIS 8.5 web server is running SMTP relay services, have the SA provide supporting documentation on how the server is hardened. A DoD-issued certificate, and specific allowed IP address should be configured.
If the IIS 8.5 web server is not running SMTP relay services, this is Not Applicable.
If the IIS web server running SMTP relay services without TLS enabled, this is a finding.
If the IIS web server running SMTP relay services is not configured to only allow a specific IP address, from the same network as the relay, this is a finding.
V-228573
False
IISW-SV-000161
Interview the System Administrator about the role of the IIS 8.5 web server.
If the IIS 8.5 web server is running SMTP relay services, have the SA provide supporting documentation on how the server is hardened. A DoD-issued certificate, and specific allowed IP address should be configured.
If the IIS 8.5 web server is not running SMTP relay services, this is Not Applicable.
If the IIS web server running SMTP relay services without TLS enabled, this is a finding.
If the IIS web server running SMTP relay services is not configured to only allow a specific IP address, from the same network as the relay, this is a finding.
M
4000