Detections
Analytics

1.1 EX19-MB-000006

Information

Exchange must use encryption for RPC client access.

GROUP ID: V-259645
RULE ID: SV-259645r960759

This setting controls whether client machines are forced to use secure channels to communicate with the server. If this feature is enabled, clients will only be able to communicate with the server over secure communication channels.

Failure to require secure connections to the client access server increases the potential for unintended eavesdropping or data loss.

Solution

Open the Exchange Management Shell and enter the following command:

Set-RpcClientAccess -Server <ServerName> -EncryptionRequired $true

See Also

https://workbench.cisecurity.org/benchmarks/23653

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-17(2), CAT|II, CCI|CCI-000068, Rule-ID|SV-259645r960759_rule, STIG-ID|EX19-MB-000006, Vuln-ID|V-259645

Plugin: Windows

Control ID: 07e50945805261a86f82cd7fa11e00bef70d6a6b540cbd4d02bd933163f28da3