Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
61 rules foundof 16,927Page 1 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-EXCHANGE-NO-OPEN-RELAY | Ensure no Receive connector allows anonymous relayexchange · Level 1 | exchange | Critical | 1 | Automated |
| TMA-EXCHANGE-1.1 | Ensure 'Enable sender ID agent' is configuredexchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-1.8 | Ensure 'Attachment Filtering Agent' is configuredexchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-1.12 | Ensure 'Internet-facing receive connectors' is set to 'Tls, BasicAuth, BasicAuthRequireTLS'exchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-2.2.9 | Ensure 'External send connector authentication: IgnoreStartTLS' is set to 'False'exchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-2.3.4 | Ensure 'Enable automatic forwards to remote domains' is set to 'False'exchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-2.3.6 | Ensure 'Require client MAPI encryption' is set to 'True'exchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-2.4.3 | Ensure 'Receive connector' is set to 'TLS'exchange · Level 1 | exchange | High | 1 | Manual review |
| TMA-EXCHANGE-3.2 | Ensure 'Allow unmanaged devices' is set to 'False'exchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-3.9 | Ensure 'Require encryption on device' is set to 'True'exchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-3.10 | Ensure 'Require password' is set to 'True'exchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-4.2 | Ensure 'Turn on administrator audit logging' is set to '<values>'exchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-AUDIT-BYPASS | Ensure no accounts are configured to bypass mailbox audit loggingexchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-MAILBOX-AUDIT | Ensure mailbox auditing is not disabled at the organization levelexchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-MODERN-AUTH | Ensure OAuth 2.0 (modern authentication) is enabled for the organizationexchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-OWA-HTTPS | Ensure Outlook on the web virtual directories publish only HTTPS URLsexchange · Level 1 | exchange | High | 1 | Automated |
| TMA-EXCHANGE-1.2 | Ensure 'Configure sender filtering' is set to 'Enabled'exchange · Level 1 | exchange | Medium | 1 | Automated |
| TMA-EXCHANGE-1.3 | Ensure 'Sender reputation' is configuredexchange · Level 1 | exchange | Medium | 1 | Automated |
| TMA-EXCHANGE-1.4 | Ensure 'Blank sender field' is configuredexchange · Level 1 | exchange | Medium | 1 | Automated |
| TMA-EXCHANGE-1.6 | Ensure 'SCL Quarantine' is 'Enabled'exchange · Level 1 | exchange | Medium | 1 | Automated |
| TMA-EXCHANGE-1.7 | Ensure 'Nonexistent recipients' is set to 'True'exchange · Level 1 | exchange | Medium | 1 | Manual review |
| TMA-EXCHANGE-1.9 | Ensure 'Maximum receive size: Connector level' is set to '25'exchange · Level 1 | exchange | Medium | 1 | Automated |
| TMA-EXCHANGE-1.10 | Ensure 'Transport Pickup Directory Path' is not setexchange · Level 1 | exchange | Medium | 1 | Automated |
| TMA-EXCHANGE-1.11 | Ensure 'Exchange recipient filter' is set to 'True'exchange · Level 1 | exchange | Medium | 1 | Automated |
| TMA-EXCHANGE-2.1.2 | Ensure 'Retain deleted items for the specified number of days' is set to '14'exchange · Level 1 | exchange | Medium | 1 | Automated |