Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
RPC encryption between Outlook and Exchange server must be enforced.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-17615 | DTOO279 | SV-54052r1_rule | ECSC-1 | Medium |
| Description |
|---|
| The remote procedure call (RPC) communication channel between an Outlook client computer and an Exchange server is not encrypted. If a malicious individual is able to eavesdrop on the network traffic between Outlook and the server, they might be able to access confidential information. |
| STIG | Date |
|---|---|
| Microsoft Outlook 2013 STIG | 2015-07-24 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-46932r1_fix) |
|---|
| Set the policy value for User Configuration -> Administrative Templates -> Microsoft Outlook 2013 -> Account Settings -> Exchange "Enable RPC encryption" to "Enabled". |