Detections
Analytics

WNDF-AV-000027 - Microsoft Defender AV must be configured to turn on email scanning.

Information

This policy setting allows the configuration of email scanning. When email scanning is enabled, the engine will parse the mailbox and mail files according to their specific format in order to analyze the mail bodies and attachments. Several email formats are currently supported, for example: pst (Outlook), dbx mbx mime (Outlook Express), binhex (Mac). If this setting is enabled, email scanning will be enabled. If this setting is disabled or not configured, email scanning will be disabled.

Solution

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Microsoft Defender Antivirus >> Scan >> 'Turn on email scanning' to 'Enabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Defender_Antivirus_V2R10_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(4), CAT|II, CCI|CCI-001170, Rule-ID|SV-213451r1260219_rule, STIG-ID|WNDF-AV-000027, STIG-Legacy|SV-89919, STIG-Legacy|V-75239, Vuln-ID|V-213451

Plugin: Windows

Control ID: 970bd3ca2909ba5b50a6daf1121f3b656ecd00783441b6ca93582977f3696e1f