UCF STIG Viewer Logo

Exchange must use Encryption for RPC client access.


Overview

Finding ID Version Rule ID IA Controls Severity
V-234765 EX13-CA-000005 SV-234765r617236_rule Medium
Description
This setting controls whether client machines are forced to use secure channels to communicate with the server. If this feature is enabled, clients will only be able to communicate with the server over secure communication channels. Failure to require secure connections to the client access server increases the potential for unintended eavesdropping or data loss.
STIG Date
Microsoft Exchange 2013 Client Access Server Security Technical Implementation Guide 2021-12-16

Details

Check Text ( C-37951r617234_chk )
Open the Exchange Management Shell and enter the following command:

Get-RpcClientAccess | Select Server, Name, EncryptionRequired

If the value of EncryptionRequired is not set to True, this is a finding.
Fix Text (F-37914r617235_fix)
Open the Exchange Management Shell and enter the following command:

Set-RpcClientAccess -Server -EncryptionRequired $true