Description:

Verifies that a list of approved sender IP addresses is configured.

Why:

Failing to maintain an accurate list of authorized IP addresses may result in spoofed email messages or failure to deliver legitimate messages when SPF is enabled. Maintaining such a list helps ensure that unauthorized servers sending spoofed messages can be detected, and permits message delivery from legitimate senders.

Configured: A list of approved sender IP addresses is configured.

Not Configured: A list of approved sender IP addresses is not configured.

Scoring: Contributes up to 1 point to the Posture Recommendations score.

Category: Exchange

Microsoft Licensing: Works with Basic licensing

Secure Score Impact: Not verified. No Microsoft Secure Score control could be confirmed for this setting from published sources. See the note in README.md before publishing this field.

Remediation in Augmentt: No in-product remediation — remediate in the Microsoft admin portals.

Compliance Frameworks:

  • CIS Microsoft 365 Benchmark v6 (Level 1) — 2.1.12

  • CIS Microsoft 365 Benchmark v7 (Level 1) — 2.1.12

Microsoft documentation: