STIGQter STIGQter: STIG Summary: MS Exchange 2010 Edge Transport Server STIG Version: 1 Release: 15 Benchmark Date: 26 Apr 2019:

Message size restrictions must be controlled on Send connectors.

DISA Rule

SV-44007r3_rule

Vulnerability Number

V-33587

Group Title

Exch-2-757

Rule Version

Exch-2-757

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Open the Exchange Management Shell and enter the following command:

Set-SendConnector -Identity <'SendConnector'> -MaxMessageSize <MaxSendSize>

If an alternate value is desired from the global value MaxSendSize, obtain signoff with risk acceptance and document in the EDSP.

Check Contents

Obtain the Email Domain Security Plan (EDSP) and locate the global maximum message send size and if signoff with risk acceptance is documented for the receive connector to have a different value.

Open the Exchange Management Shell and enter the following command:
Get-SendConnector | Select Identity, MaxMessageSize

or

Get-TransportConfig | Select Identity, MaxSendSize

If 'MaxMessageSize' is set to a numeric value different from the global value, and has signoff and risk acceptance in the EDSP, this is not a finding.

If the value of ‘MaxMessageSize' is not the same as the global value, this is a finding.

Vulnerability Number

V-33587

Documentable

False

Rule Version

Exch-2-757

Severity Override Guidance

Obtain the Email Domain Security Plan (EDSP) and locate the global maximum message send size and if signoff with risk acceptance is documented for the receive connector to have a different value.

Open the Exchange Management Shell and enter the following command:
Get-SendConnector | Select Identity, MaxMessageSize

or

Get-TransportConfig | Select Identity, MaxSendSize

If 'MaxMessageSize' is set to a numeric value different from the global value, and has signoff and risk acceptance in the EDSP, this is not a finding.

If the value of ‘MaxMessageSize' is not the same as the global value, this is a finding.

Check Content Reference

M

Target Key

1995

Comments