Microsoft Exchange Server
TMA-EXCHANGE-1.2
Ensure 'Configure sender filtering' is set to 'Enabled'
Опис
Sender filtering compares a list of blocked senders that's maintained by the Exchange administrator. Note: For more information on how to create the list for blocked senders, please visit: Use the Exchange Management Shell to configure blocked senders and domains for sender filtering Note #2: Sender filtering is enabled (by default) on a system performing the Edge Transport server role. Prints compliant when sender filtering is Enabled. Run on each Edge Transport server. Run from an Exchange Management Shell or after `Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn`; the audit loads the snap-in itself when Get-ExchangeServer is missing and fails if it cannot.
Како се проверава
Метод провере: Команда љуске
$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-ExchangeServer -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn -ErrorAction Stop }; if (-not (Get-Command Get-ExchangeServer -ErrorAction SilentlyContinue)) { throw 'Exchange Management Shell cmdlets are not available' }; $c = Get-SenderFilterConfig -ErrorAction Stop; if ($c.Enabled -eq $true) { 'compliant' } else { 'noncompliant' }- Очекивани излаз
compliant
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Set-SenderFilterConfig -Enabled $true
Својства
- Оперативни системи
- Било који
- Ознаке
- exchangeantispam
- Референца
- CIS Microsoft Exchange Server 2019 Benchmark v1.0.1 - 1.2 Ensure 'Configure sender filtering' is set to 'Enabled'
Проверите овај рачунар
Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.
tmaegis scan --target exchange