Title

Routing Group is not selected as the SMTP connector scope. (Cat II impact)

Discussion

E-mail system availability depends in part on best practices strategies for setting tuning configurations. This setting determines which SMTP Servers are permitted to use this SMTP Connector, identifying those for which it is the most efficient link. Failure to control SMTP network connections risks slow or lost data due to inefficient links between SMTP connections. Selecting “Entire Organization” allows any computer in the Exchange organization to use this connector. Selecting “Routing Group” means only those members of the connector's routing group may use the connector. Use of the connector should be limited to the Routing Group in order to limit and control general network connectivity.

Check Content

Validate connector scope configuration. Procedure: Exchange System Manager>>Administrative Groups>> [Administrative Group]>>Routing Groups>> [routing group]>>Connectors>> [SMTP connector]>> >>Properties >> Address Space tab>>Connector Scope The “Routing Group” checkbox should be selected. Criteria: If the “Routing Group” checkbox is selected, this is not a finding.

Fix Text

Configure the SMTP connector scope. Procedure: Exchange System Manager>>Administrative Groups>> [Administrative Group]>>Routing Groups>> [routing group]>>Connectors>> [SMTP connector]>> >>Properties >> Address Space tab>>Connector Scope Select the “Routing Group” checkbox.

Additional Identifiers

Rule ID: SV-20334r1_rule

Vulnerability ID: V-18697

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.