Center for Internet Security Benchmark for Exchange 2007 for Windows Server 2003

Center for Internet Security Benchmark for Exchange 2007 for Windows Server 2003 Version 1.0 December 2007 Copyright 2001-2007, The Center for Internet Security (CIS) Editor: Adam Cecchetti Leviathan Security Group http://www.cisecurity.org cis-feedback@cisecurity.org Table of Contents Table of Contents .......................................................................................................................... 2 Terms of Use Agreement .............. 5 Introduction ................................... 8 Explanation of This Document ................................................................... 8 Intended Audience ...................................................... 8 Security Levels............................ 8 Precursor Technical Information ................................ 9 1. General Exchange Guidance .............................................................................................. 11 1.1. General Guidance ........... 11 1.2. Exchange Edge vs. Hub Transport ................. 12 1.3. Edge Server Management 12 1.4. Roles ............................................................................................................................... 13 1.5. Features .......................... 14 2. Recommended Security Settings for Exchange Controls ................................................ 16 3. Pre-Installation and Installation Recommendations ....................... ...