Detections
Analytics
EX13-MB-000335 - Exchange must provide Mailbox databases in a highly available and redundant configuration.
Information
To protect Exchange Server mailbox databases and the data they contain by configuring Mailbox servers and databases for high availability and site resilience.A database availability group (DAG) is a component of the Mailbox server high availability and site resilience framework built into Microsoft Exchange Server 2013. A DAG is a group of Mailbox servers that hosts a set of databases and provides automatic database-level recovery from failures that affect individual servers or databases.
A DAG is a boundary for mailbox database replication and database and server switchovers and failovers.
Any server in a DAG can host a copy of a mailbox database from any other server in the DAG. When a server is added to a DAG, it works with the other servers in the DAG to provide automatic recovery from failures that affect mailbox databases, such as a disk, server, or network failure.
Solution
Update the EDSP.Add two or more Mailbox servers to the database availability group.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Exchange_2013_Y24M07_STIG.zip
Item Details
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-5, CAT|II, CCI|CCI-002385, Rule-ID|SV-207332r961620_rule, STIG-ID|EX13-MB-000335, STIG-Legacy|SV-84683, STIG-Legacy|V-70061, Vuln-ID|V-207332
Plugin: Windows
Control ID: 76843a4280c0090b981812561016ae78addd2c71a7f0cd318075decf539959a4