Exchange Server compliance reports: SOX, HIPAA, the PCI DSS, and the GLBA

Exchange Server compliance made easy: SOX, HIPAA, the PCI DSS, and the GLBA

For Exchange Server admins, staying compliant with regulations like SOX, HIPAA, the PCI DSS, and the GLBA is essential but can be overwhelming. The compliance reports in Exchange Reporter Plus help streamline this process by offering key insights that focus on critical compliance areas. With these reports, Exchange admins can ensure they’re aligned with the necessary compliance standards without the complexity of performing manual audits.

• SOX
• HIPAA
• PCI DSS
• GLBA

SOX

Logon Failure

This report under the SOX category tracks failed logon attempts due to unknown usernames or incorrect passwords. It provides key details such as the username, the timestamp of the logon attempt, the IP address and port number involved, and the error description that helps Exchange admins identify unauthorized logon attempts.

HIPAA

Undelivered Emails

This report under the HIPAA category provides a comprehensive view of all the emails that failed to reach their recipients within a specified period. Admins can filter the results based on internal or external communications to isolate delivery issues effectively. Each entry includes the sender and recipient email addresses, message size in both kilobytes and megabytes, subject line, timestamp, and possible reasons for delivery failure. This helps Exchange admins detect any misconfigurations or troubleshoot issues relating to message delivery.

Sent Traffic for Users

This report under the HIPAA category provides a comprehensive view of all emails sent by selected users over a selected period, with filters for the Exchange organization, the recipient type (to, CC, or BCC), and the message direction (internal or external). The report displays the message timestamp, sender and recipient addresses, recipient status, subject, message size in kilobytesKB, and unique message ID, supporting HIPAA compliance through thorough tracking of outbound communications.

Received Traffic for Users

This report under the HIPAA category provides a comprehensive view of all emails received by selected users over a selected period, with filters for Exchange Server and the message direction (internal or external). The report displays the message timestamp, sender and recipient addresses, subject, message size in kilobytes, and unique message ID, supporting HIPAA compliance through thorough tracking of inbound communications.

PCI DSS

Permissions Based on Mailboxes

This report under the PCI DSS category provides a detailed view of mailbox permissions for a selected AD user or group. It helps you identify who has full access, send as, send on behalf, read, or write permissions for specific mailboxes. You can also see whether each permission is inherited or explicitly assigned, making it easier to track all mailbox-level access in line with PCI DSS requirements.

Permissions Based on Users

This report under the PCI DSS category shows the mailbox permissions held by selected users or groups across the organization. It lists the mailboxes they have access to along with the type of permission, such as full access, send as, read, or delete. This helps admins maintain visibility into user-level mailbox privileges for PCI DSS compliance.

Logon Failure

This report under the PCI DSS category tracks failed logon attempts due to unknown usernames or incorrect passwords. It provides key details such as the username, the timestamp of the logon attempt, the IP address and port number involved, and the error description that helps Exchange admins identify unauthorized logon attempts.

No. of Mails Sent to Internet

This report under the PCI DSS category shows the number and total size of emails sent to external domains for a selected period. Users can filter the results based on all hours, business hours, or non-business hours. Along with a detailed table listing each external domain, email count, and total size in megabytes, the report also presents the data visually in a bar graph, making it easier to analyze outbound email patterns for PCI DSS compliance.

No. of Mails Received from Internet

This report under the PCI DSS category shows the number and total size of emails received from external domains for a selected period. Users can filter the results based on all hours, business hours, or non-business hours. Along with a detailed table listing each external domain, email count, and total size in megabytes, the report also presents the data visually in a bar graph, making it easier to analyze inbound email patterns for PCI DSS compliance.

GLBA

Permissions Based on Mailboxes

This report under the GLBA category provides a detailed view of mailbox permissions for a selected AD user or group. It helps you identify who has full access, send as, send on behalf, read, or write permissions for specific mailboxes. You can also see whether each permission is inherited or explicitly assigned, making it easier to track all mailbox-level access in line with GLBA requirements.

Permissions Based on Users

This report under the GLBA category shows the mailbox permissions held by selected users or groups across the organization. It lists the mailboxes they have access to along with the type of permission, such as full access, send as, read, or delete. This helps admins maintain visibility into user-level mailbox privileges for GLBA compliance.