UCF STIG Viewer Logo

Encryption must be used for RPC client access.


Overview

Finding ID Version Rule ID IA Controls Severity
EXCH-CA-100 EXCH-CA-100 EXCH-CA-100_rule Medium
Description
Failure to require secure connections to the client access server increases the potential for unintended decryption and data loss. This setting controls whether client machines are forced to use secure channels to communicate with the server. If this feature is enabled, clients will only be able to communicate with the server over secure communication channels.
STIG Date
Microsoft Exchange 2010 Client Access Server Role 2012-05-31

Details

Check Text ( C-_chk )
Open the Exchange Management Shell and enter the following command.

Get-RpcClientAccess | Select Server, EncryptionRequired

If the value of "EncryptionRequired" is not set to "True", this is a finding.
Fix Text (F-_fix)
Open the Exchange Management Shell and enter the following command.

Set-RpcClientAccess -Server <'ServerName'> -EncryptionRequired $true