Description:
Verifies that Exchange IP address allow lists are not in use.
Why:
Messages sent from IP addresses on an allow list bypass important security mechanisms, including spam filtering and sender authentication checks. Avoiding use of IP allow lists prevents potential threats from circumventing security mechanisms.
Configured: Exchange IP address allow lists are not in use.
Not Configured: Exchange IP addresss allow lists are configured.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Exchange
Microsoft Licensing: Works with Basic licensing
Remediation in Augmentt: No in-product remediation — remediate in the Microsoft admin portals.
Compliance Frameworks:
CIS Microsoft 365 Benchmark v6 (Level 1) — 6.2.2
CIS Microsoft 365 Benchmark v7 (Level 1) — 6.2.2
Microsoft documentation: