SMTP Virtual Server Auditing is not active.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-18770	EMG2-124 Exch2K3	SV-20470r1_rule	ECAT-1	Medium

Description
Log files help establish a history of activities, and can be useful in detecting attack attempts or determining tuning adjustments to improve availability. This setting controls the creation and format of log files used to monitor the interaction between this SMTP Virtual Server and other SMTP hosts.

STIG	Date
Microsoft Exchange Server 2003	2014-08-19

Details

Check Text ( C-22484r1_chk )
Ensure that SMTP Virtual Server Auditing is active. Procedure: Exchange System Manger >> Administrative Groups >> [administrative group}>> Servers >> [server] >> Protocols >> SMTP >> [specific SMTP server] >> properties >> General tab The “Enable Logging” checkbox should be checked. Criteria: If the “Enable Logging” checkbox is checked, this is not a finding.

Fix Text (F-19423r1_fix)
Configure SMTP Virtual Server auditing. Procedure: Exchange System Manger >> Administrative Groups >> [administrative group}>> Servers >> [server] >> Protocols >> SMTP >> [specific SMTP server] >> properties >> General tab Select the “Enable Logging” checkbox.