U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Exchange 2010 Edge STIG Version 1, Release 15 Checklist Details (Checklist Revisions)

Supporting Resources:

Target:

Target CPE Name
Microsoft Exchange Server 2010 cpe:/a:microsoft:exchange_server:2010 (View CVEs)

Checklist Highlights

Checklist Name:
Exchange 2010 Edge STIG
Checklist ID:
527
Version:
Version 1, Release 15
Type:
Compliance
Review Status:
Archived
Authority:
Governmental Authority: Defense Information Systems Agency
Original Publication Date:
01/27/2017

Checklist Summary:

Email systems are comprised of multiple products and services working together to enable transport and delivery of messages to users. This overview gives technology-specific background and information specific to Microsoft Exchange email servers. Included also are security review considerations to prepare for periodic assessments. The associated Security Technical Implementation Guide (STIG), provides security policy and configuration requirements for the Microsoft Exchange Server 2010 application. The Exchange 2010 Edge STIG is on of the five roles available with Microsoft Exchange Server (Client Access, Mailbox, Hub Transport, and Edge Transport).

Checklist Role:

  • Enterprise Email Server

Known Issues:

Not Provided

Target Audience:

This document is a requirement for all DoD-administered systems and all systems connected to DoD networks, as addressed in the technology section. These requirements are designed to assist System Managers (SMs), Information Assurance Managers (IAMs), Information Assurance Officers (IAOs), and System Administrators (SAs) with configuring and maintaining security controls.

Target Operational Environment:

  • Managed

Testing Information:

Not Provided

Regulatory Compliance:

DoD Directive (DoDD) 8500.1

Comments/Warnings/Miscellaneous:

Not Provided

Disclaimer:

Not Provided

Product Support:

disa.stig_spt@mail.mil

Point of Contact:

disa.stig_spt@mail.mil

Sponsor:

Not Provided

Licensing:

Not Provided

Change History:

Changed status from "under review" to "final" - 31 August 2015
Version 1, Release 9 - 31 July 2015
Changed status from "Under Review" to "Final" - 03 June 2015
Version 1, Release 10 - 26 October 2015
Changed status from "Under Review" to "Final" - 03 December 2015
Changed status from "Under Review" to "Final" - 28 January 2016
3/7/2016 Promote to Final
Updated to v1, r12 - 01/27/2017
Updated to FINAL - 03/08/2017
null
Updated URL to reflect change to the DISA website - http --> https
Updated to Version 1, Release 13 - 10/25/18
Updated to FINAL - 11/26/18
updated to Version 1, Release 14 - 1/22/19
updated to v1, r15 - 4/30/19
Updated URLs - 6/7/19

Dependency/Requirements:

URL Description

References:

Reference URL Description

NIST checklist record last modified on 03/07/2024