Exchange Mail quota settings must not restrict receiving mail.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-207297 | EX13-MB-000155 | SV-207297r615936_rule | Low |
| Description |
|---|
| Mail quota settings control the maximum sizes of a user’s mailbox and the system’s response if these limits are exceeded. Mailbox data that is not monitored against a quota increases the risk of mail loss due to filled disk space, which can also render the system unavailable. Failure to allow mail receipt may impede users from receiving mission-critical data. |
| STIG | Date |
|---|---|
| Microsoft Exchange 2013 Mailbox Server Security Technical Implementation Guide | 2021-12-16 |
Details
| Check Text ( C-7555r393404_chk ) |
|---|
| Open the Exchange Management Shell and enter the following command: Get-MailboxDatabase | Select Name, Identity, ProhibitSendReceiveQuota If the value of ProhibitSendReceiveQuota is not set to Unlimited, this is a finding. or If the value of ProhibitSendReceiveQuote is set to an alternate value and has signoff and risk acceptance in the EDSP, this is not a finding. |
| Fix Text (F-7555r393405_fix) |
|---|
| Open the Exchange Management Shell and enter the following command: Set-MailboxDatabase -Identity <'IdentityName'> -ProhibitSendReceiveQuota Unlimited Note: The or The value as identified by the EDSP that has obtained a signoff with risk acceptance. |