Ensure 'Receive connector' is set to 'TLS'

CaoCấp 1Xem xét thủ côngexchange

Mô tả

This policy setting configures the advertised and accepted authentication mechanisms for the receive connector. The primary function of receive connectors in the front-end transport service is to accept anonymous and authenticated Simple Mail Transfer Protocol (SMTP) connections in the Exchange environment. Note: Some available values have dependencies and exclusions: • None is not compatible... Manual per the benchmark: which connectors may carry non-TLS mechanisms depends on their role. Run on a Mailbox server (organization-wide objects are read from AD).

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

On each Mailbox server run: Get-ReceiveConnector | Select Name, Identity, AuthMechanism. Confirm AuthMechanism includes Tls on every Receive connector (a valid certificate must be enabled for SMTP). Review any connector without Tls and document why it is needed.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Set-ReceiveConnector -Identity '<connector>' -AuthMechanism 'Tls' (or Get-ReceiveConnector | Set-ReceiveConnector -AuthMechanism 'Tls'; keep any other mechanisms the connector requires)

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: exchangetransporttls
Tham chiếu: CIS Microsoft Exchange Server 2019 Benchmark v1.0.1 - 2.4.3 Ensure 'Receive connector' is set to 'TLS'