← Back to Microsoft Exchange 2019 Mailbox Server Security Technical Implementation Guide

V-259645

CAT II (Medium)

Exchange must use encryption for RPC client access.

Rule ID

SV-259645r960759_rule

STIG

Microsoft Exchange 2019 Mailbox Server Security Technical Implementation Guide

Version

V2R3

CCIs

CCI-000068

Discussion

This setting controls whether client machines are forced to use secure channels to communicate with the server. If this feature is enabled, clients will only be able to communicate with the server over secure communication channels. Failure to require secure connections to the client access server increases the potential for unintended eavesdropping or data loss.

Check Content

Open the Exchange Management Shell and enter the following command:

Get-RpcClientAccess | Select-Object -Property Server, Name, EncryptionRequired

If the value of "EncryptionRequired" is not set to "True", this is a finding.

Note: This is configured as "True" by default.

Fix Text

Open the Exchange Management Shell and enter the following command:

Set-RpcClientAccess -Server <ServerName> -EncryptionRequired $true