Skip to main content
CUI

Vulnerability V-228398

Back

V-228398

CAT III

The Exchange Global Recipient Count Limit must be set.

Ships Affected
1
Total Findings
1
Open
1
Closed
0

Check Text

Review the Email Domain Security Plan (EDSP). Determine the global maximum message recipient count. Open the Exchange Management Shell and enter the following command: Get-TransportConfig | Select Name, Identity, MaxRecipientEnvelopeLimit If the value of "MaxRecipientEnvelopeLimit" is not set to "5000", this is a finding. or If "MaxRecipientEnvelopeLimit" is set to an alternate value and has signoff and risk acceptance in the EDSP, this is not a finding.

Fix Text

Update the EDSP to specify the global maximum message recipient count. Set-TransportConfig -MaxRecipientEnvelopeLimit 5000 or Enter the value as identified by the EDSP that has obtained a signoff with risk acceptance. Restart the Microsoft Exchange Information Store service.

STIG Reference

STIG
Microsoft Exchange 2016 Mailbox Server Security Technical Implementation Guide
Version
2
Release
6
Rule ID
SV-228398r879653_rule

All Occurrences

This vulnerability appears on 1 ship(s)

Ship Hull # Source File Status Assigned To Scan Date Actions
USNS MONTFORD POINT T-ESD-1 _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_MSExchange2016MB_V2R6_20251023-152357.ckl
Unassigned 2026-01-14T12:57:33.455034 View in Context
CUI