Title

The SMTP Virtual Server Message Count Limit is not 20. (Cat III impact)

Discussion

E-Mail system availability depends in part on best practices strategies for setting tuning configurations. This setting controls the maximum number of messages allowed in a single SMTP session by breaking large numbers of messages into multiple sessions. This configuration is the preferred place to control session size.

Check Content

Perform for each SMTP virtual server. Procedure: Exchange System Manager >> Administrative Groups >> [administrator group] >> Servers >> [server] >> Protocols >> SMTP >> [specific SMTP server] >> Properties >>Messages tab The “Limit number of messages per connection” should be set to 20. Criteria: If “Limit number of messages per connection” is set to 20 (or other value with justifying documentation), this is not a finding.

Fix Text

Configure the SMTP Session messages count limit. Procedure: Exchange System Manager >> Administrative Groups >> [administrator group] >> Servers >> [server] >> Protocols >> SMTP >> [specific SMTP server] >> Properties >>Messages tab Set “Limit number of messages per connection” at 20 or the value determined necessary for the site.

Additional Identifiers

Rule ID: SV-20282r1_rule

Vulnerability ID: V-18669

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.