TMAegisBeta
Weitere Regeln für exchange

Microsoft Exchange Server

TMA-EXCHANGE-1.9

Ensure 'Maximum receive size: Connector level' is set to '25'

MittelStufe 1Automatisiertexchange

Beschreibung

This setting limits the size of a message a user can receive. Receive size includes the header This includes the message header, the message body, and any attachments. For internal message flow, Exchange Server uses the custom X-MS-Exchange- Organization-OriginalSize message header to record the original message size of the message as it enters the Exchange Server organization. Whenever the... Prints the number of Receive connectors whose MaxMessageSize is above 25 MB or Unlimited (expected 0). Run on each Edge Transport server. Run from an Exchange Management Shell or after `Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn`; the audit loads the snap-in itself when Get-ExchangeServer is missing and fails if it cannot.

So wird geprüft

Prüfmethode: Shell-Befehl

shell
$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-ExchangeServer -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn -ErrorAction Stop }; if (-not (Get-Command Get-ExchangeServer -ErrorAction SilentlyContinue)) { throw 'Exchange Management Shell cmdlets are not available' }; $bytes = { param($s) if ("$s" -match '\(([\d,\.\s]+) bytes\)') { [int64]($matches[1] -replace '[^\d]','') } else { [int64]::MaxValue } }; $bad = @(Get-ReceiveConnector -ErrorAction Stop | Where-Object { (& $bytes $_.MaxMessageSize) -gt 25MB }); $bad.Count
Erwartete Ausgabe
0

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Set-ReceiveConnector '<connector>' -MaxMessageSize 25MB (or for all: Get-ReceiveConnector | Set-ReceiveConnector -MaxMessageSize 25MB)

Eigenschaften

Betriebssysteme
Beliebig
Tags
exchangetransport
Referenz
CIS Microsoft Exchange Server 2019 Benchmark v1.0.1 - 1.9 Ensure 'Maximum receive size: Connector level' is set to '25'

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell
tmaegis scan --target exchange