TMA-EXCHANGE-2.4.3

Ensure 'Receive connector' is set to 'TLS'

높음레벨 1수동 검토exchange

설명

This policy setting configures the advertised and accepted authentication mechanisms for the receive connector. The primary function of receive connectors in the front-end transport service is to accept anonymous and authenticated Simple Mail Transfer Protocol (SMTP) connections in the Exchange environment. Note: Some available values have dependencies and exclusions: • None is not compatible... Manual per the benchmark: which connectors may carry non-TLS mechanisms depends on their role. Run on a Mailbox server (organization-wide objects are read from AD).

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

On each Mailbox server run: Get-ReceiveConnector | Select Name, Identity, AuthMechanism. Confirm AuthMechanism includes Tls on every Receive connector (a valid certificate must be enabled for SMTP). Review any connector without Tls and document why it is needed.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Set-ReceiveConnector -Identity '<connector>' -AuthMechanism 'Tls' (or Get-ReceiveConnector | Set-ReceiveConnector -AuthMechanism 'Tls'; keep any other mechanisms the connector requires)

속성

운영 체제: 모두
태그: exchangetransporttls
참고 자료: CIS Microsoft Exchange Server 2019 Benchmark v1.0.1 - 2.4.3 Ensure 'Receive connector' is set to 'TLS'