Microsoft Exchange Server
TMA-EXCHANGE-OWA-HTTPS
Ensure Outlook on the web virtual directories publish only HTTPS URLs
Opis
OWA internal/external URLs must use HTTPS so that forms-based logon credentials and session cookies are never sent in clear text. Prints the number of OWA virtual directories with a non-HTTPS URL (expected 0). Run from an Exchange Management Shell or after `Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn`; the audit loads the snap-in itself when Get-ExchangeServer is missing and fails if it cannot.
Kako se proverava
Metod provere: Komanda ljuske
$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-ExchangeServer -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn -ErrorAction Stop }; if (-not (Get-Command Get-ExchangeServer -ErrorAction SilentlyContinue)) { throw 'Exchange Management Shell cmdlets are not available' }; $bad = @(Get-OwaVirtualDirectory -ADPropertiesOnly -ErrorAction Stop | Where-Object { ("$($_.InternalUrl)" -and "$($_.InternalUrl)" -notlike 'https://*') -or ("$($_.ExternalUrl)" -and "$($_.ExternalUrl)" -notlike 'https://*') }); $bad.Count- Očekivani izlaz
0
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Set-OwaVirtualDirectory '<server>\owa (Default Web Site)' -InternalUrl https://<fqdn>/owa -ExternalUrl https://<fqdn>/owa and keep 'Require SSL' enabled on the IIS owa application.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- exchangeowa
- Referenca
- CIS Microsoft Exchange Server Benchmark - Outlook on the web / Virtual directory URLs and SSL (verify section number for your release)
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target exchange