Microsoft Exchange Server
TMA-EXCHANGE-1.6
Ensure 'SCL Quarantine' is 'Enabled'
Description
Spam Confidence Level (SCL) is a rating assigned to incoming email messages by the Content Filter agent in Exchange Server. It is a measure of the likelihood that an email is spam based on various content analysis techniques and spam detection algorithms. The SCL value ranges from 0 to 9, with 9 being the highest level of confidence that the email is spam. Ensure SCLQuarantineEnabled is set to... Prints compliant when SCLQuarantineEnabled is True and SCLQuarantineThreshold is 6 or lower. Run on each Edge Transport server. Run from an Exchange Management Shell or after `Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn`; the audit loads the snap-in itself when Get-ExchangeServer is missing and fails if it cannot.
Méthode de vérification
Méthode d'audit: Commande shell
$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-ExchangeServer -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn -ErrorAction Stop }; if (-not (Get-Command Get-ExchangeServer -ErrorAction SilentlyContinue)) { throw 'Exchange Management Shell cmdlets are not available' }; $c = Get-ContentFilterConfig -ErrorAction Stop; if ($c.SCLQuarantineEnabled -eq $true -and $null -ne $c.SCLQuarantineThreshold -and [int]$c.SCLQuarantineThreshold -le 6) { 'compliant' } else { 'noncompliant' }- Sortie attendue
compliant
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
Set-ContentFilterConfig -SCLQuarantineEnabled $true -SCLRejectThreshold 8 -SCLQuarantineThreshold 6 (SCLRejectThreshold must be greater than SCLQuarantineThreshold).
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- exchangeantispam
- Référence
- CIS Microsoft Exchange Server 2019 Benchmark v1.0.1 - 1.6 Ensure 'SCL Quarantine' is 'Enabled'
Vérifier cet hôte
Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.
tmaegis scan --target exchange