Checklist Summary:

Email systems are comprised of multiple products and services working together to enable transport and delivery of messages to users. This overview gives technology-specific background and information specific to Microsoft Exchange email servers. Included also are security review considerations to prepare for periodic assessments. The associated Security Technical Implementation Guide (STIG), provides security policy and configuration requirements for the Microsoft Exchange Server 2010 application.

Checklist Role:

• Enterprise Email Server

Known Issues:

Not Provided

Target Audience:

This document is a requirement for all DoD-administered systems and all systems connected to DoD networks, as addressed in the technology section. These requirements are designed to assist System Managers (SMs), Information Assurance Managers (IAMs), Information Assurance Officers (IAOs), and System Administrators (SAs) with configuring and maintaining security controls.

Target Operational Environment:

• Managed

Testing Information:

Not Provided

Regulatory Compliance:

DoD Directive (DoDD) 8500.1

Comments/Warnings/Miscellaneous:

Not Provided

Disclaimer:

Not Provided

Product Support:

disa.stig_spt@mail.mil

Point of Contact:

disa.stig_spt@mail.mil

Sponsor:

Not Provided

Licensing:

Not Provided

Change History:

Changed status from "under review" to "final" - 08 September 2015
Updated URL to reflect change to the DISA website - http --> https
Updated URLs - 6/7/19

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 06/07/2019