Exchange must use Encryption for RPC client access.

From MS Exchange 2013 Client Access Server Security Technical Implementation Guide

Associated with: CCI-000068

SV-84337r1_rule Exchange must use Encryption for RPC client access.

Vulnerability discussion

This setting controls whether client machines are forced to use secure channels to communicate with the server. If this feature is enabled, clients will only be able to communicate with the server over secure communication channels.Failure to require secure connections to the client access server increases the potential for unintended eavesdropping or data loss.

Check content

Open the Exchange Management Shell and enter the following command: Get-RpcClientAccess | Select Server, Name, EncryptionRequired If the value of EncryptionRequired is not set to True, this is a finding.

Fix text

Open the Exchange Management Shell and enter the following command: Set-RpcClientAccess -Server -EncryptionRequired $true

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.