Sender Identification process must be enabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
Exch-ED-239	Exch-ED-239	Exch-ED-239_rule		Medium

Description
Sender Identification (SID) is an email anti-spam sanitization process. Sender ID uses DNS MX record lookups to verify the SMTP sending server is authorized to send email for the originating domain. Failure to implement Sender ID risks that SPAM could be admitted into the email domain that originates from rogue servers. Most SPAM content originates from domains where the IP address has been spoofed prior to sending, thereby avoiding detection.

Description

Sender Identification (SID) is an email anti-spam sanitization process. Sender ID uses DNS MX record lookups to verify the SMTP sending server is authorized to send email for the originating domain. Failure to implement Sender ID risks that SPAM could be admitted into the email domain that originates from rogue servers. Most SPAM content originates from domains where the IP address has been spoofed prior to sending, thereby avoiding detection.

STIG	Date
Microsoft Exchange 2010 Edge Transport Server Role	2012-05-31

Details

Check Text ( C-_chk )
Open the Exchange Management Shell and enter the following command. Get-SenderIdConfig \| Name, Identity, Enabled If the value of "Enabled" is not set to "True", this is a finding.

Fix Text (F-_fix)
Open the Exchange Management Shell and enter the following command. Set-SenderIdConfig -Enable $true