Title

The “Disable Server Monitoring” feature is enabled. (Cat II impact)

Discussion

Monitors are automated “process watchers” that respond to performance changes, and can be useful in detecting outages and alerting administrators where attention is needed. This setting controls whether all monitoring processes on this server are enabled or disabled. Monitoring should never be disabled on the server during production hours. The processing cycles needed for monitoring should be incorporated into server sizing. If the configuration disables monitoring, it stops Exchange's built in safety checks to warn the administrators of malfunctions.

Check Content

Review Exchange Monitoring. Procedure: Exchange System Manager >> Administrative Groups >> [administrative group] >> Servers >> [server] >> Properties >> Monitoring tab The “Disable monitoring of this server” checkbox should be clear. Criteria: If the “Disable monitoring of this server” checkbox is cleared, this is not a finding.

Fix Text

Configure monitoring. Procedure: Exchange System Manager >> Administrative Groups >> [administrative group] >> Servers >> [server] >> Properties >> Monitoring tab Clear the “Disable Monitoring of this server” checkbox.

Additional Identifiers

Rule ID: SV-20464r1_rule

Vulnerability ID: V-18767

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.