Detections
Analytics

1.20 EX19-ED-000109

Information

More than one Edge server must be deployed.

GROUP ID: V-259596
RULE ID: SV-259596r961152

To ensure hostile insiders are unable to easily commit DoS attacks and reduce the effectiveness of mail flow throughout the environment, a second Edge server is deployed to allow for multiple paths of mail flow both internally and externally into the environment. This prevents a single point-of-failure and allows for service to continue in the event of a DoS attack targeting one Edge role.

Solution

At a minimum, a second server must be deployed and subscribed to.

See Also

https://workbench.cisecurity.org/benchmarks/23645

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-5(1), CAT|II, CCI|CCI-001094, Rule-ID|SV-259596r961152_rule, STIG-ID|EX19-ED-000109, Vuln-ID|V-259596

Plugin: Windows

Control ID: 808c374203a1168c0e774dadf167c2003bfcd5320490465e8c9c1c62b6e26c2a