1.16 Set 'Turn on Connectivity logging' to 'True'

Information

A connectivity log is a record of the SMTP connection activity of the outbound message delivery queues to the destination Mailbox server, smart host, or domain. Connectivity logging is available on Hub Transport servers and Edge Transport servers. By default, connectivity logging is disabled.

Rationale:

If events are not recorded it may be difficult or impossible to determine the root cause of system problems or the unauthorized activities of malicious users.

Solution

To implement the recommended state, execute the following PowerShell cmdlet:

Set-TransportService EXCHANGE1 -ConnectivityLogEnabled $true

See Also

https://workbench.cisecurity.org/files/1514

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12

Plugin: Windows

Control ID: f502d489382e9f6ec0cd7de2086343b9376a41a3734cca125296b4982c13a661