STIGQter: STIG Summary: MS Exchange 2010 Edge Transport Server STIG Version: 1 Release: 15 Benchmark Date: 26 Apr 2019:

Block list service provider must be identified.

DISA Rule

SV-44053r2_rule

Vulnerability Number

V-33633

Group Title

Exch-2-330

Rule Version

Exch-2-330

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Open the Exchange Management Shell and enter the following command:

Set-IPBlockListProvider -Name <Provider Name> [Additional optional parameters as required by the service provider]

Document the configuration in the EDSP.

Check Contents

Access the EDSP for the name and information for the Block List provider.

Open the Exchange Management Shell and enter the following command:
Get-IPBlockListProvider | Select Name Identity LookupDomain

If the values for Name, GUID and LookupDomain are configured, this is not a finding.

Vulnerability Number

V-33633

Documentable

False

Rule Version

Exch-2-330

Severity Override Guidance

Access the EDSP for the name and information for the Block List provider.

Open the Exchange Management Shell and enter the following command:
Get-IPBlockListProvider | Select Name Identity LookupDomain

If the values for Name, GUID and LookupDomain are configured, this is not a finding.

Check Content Reference

M

Target Key

1995

Comments