Exchange must have the most current, approved service pack installed.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-221263EX16-ED-000700SV-221263r961683_ruleCCI-002605medium
Description
The organization (including any contractor to the organization) must promptly install security-relevant software updates (e.g., patches, service packs, hot fixes). Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling must also be addressed.
STIGDate
Microsoft Exchange 2016 Edge Transport Server Security Technical Implementation Guide2024-12-06

Details

Check Text (C-221263r961683_chk)

Open the Exchange Management Shell and enter the following command: Get-ExchangeServer | fl name, AdminDisplayVersion If the value of "AdminDisplayVersion" does not return the most current, approved service pack, this is a finding.

Fix Text (F-22967r411916_fix)

Install the most current, approved service pack.