Detections
Analytics

MS.EXO.15.1v1 - URL comparison with a block-list SHOULD be enabled.

Information

Users may be directed to malicious websites via links in email. Blocking access to known, malicious URLs can prevent users from accessing known malicious websites.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Any product meeting the requirements outlined in this baseline policy may be
used. If the agency uses Microsoft Defender for Office 365, see the following
implementation steps for
[enabling preset security policies](./defender.md#msdefender13v1), which
include Safe Links protections to scan URLs in email messages against a list
of known, malicious links.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-3

Plugin: microsoft_azure

Control ID: a520748b8c0b5c6fd2e8acc889614a656d6b94838ef09bb3c141a780372e141c