{"id":13038,"date":"2025-12-19T10:00:36","date_gmt":"2025-12-19T06:00:36","guid":{"rendered":"https:\/\/me.kaspersky.com\/blog\/?p=13038"},"modified":"2025-12-15T22:08:47","modified_gmt":"2025-12-15T18:08:47","slug":"exchange-se-hardening-2026","status":"publish","type":"post","link":"https:\/\/me.kaspersky.com\/blog\/exchange-se-hardening-2026\/13038\/","title":{"rendered":"\u062a\u062d\u0635\u064a\u0646 \u062e\u0648\u0627\u062f\u0645 Exchange"},"content":{"rendered":"<p>\u064a\u062c\u0627\u062f\u0644 \u0639\u062f\u062f \u0642\u0644\u064a\u0644 \u0645\u0646 \u062e\u0628\u0631\u0627\u0621 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0641\u064a \u0623\u0646 \u0627\u0644\u062a\u0639\u0631\u0636 \u0644\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u0647\u062f\u0641 \u062e\u0648\u0627\u062f\u0645 Microsoft Exchange \u0628\u0627\u062a\u062a \u0623\u0645\u0631\u064b\u0627 \u0644\u0627 \u0645\u0641\u0631 \u0645\u0646\u0647\u060c \u0648\u064a\u0624\u0643\u062f\u0648\u0646 \u0623\u0646 \u062e\u0637\u0631 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u064a\u0638\u0644 \u0645\u0631\u062a\u0641\u0639\u064b\u0627 \u0628\u0634\u0643\u0644 \u0645\u0633\u062a\u0645\u0631. \u0648\u0641\u064a \u0623\u0643\u062a\u0648\u0628\u0631\u060c <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/techcommunity.microsoft.com\/blog\/exchange\/released-october-2025-exchange-server-security-updates\/4461276\">\u0623\u0648\u0642\u0641\u062a Microsoft \u062f\u0639\u0645 Exchange Server 2019<\/a>\u060c \u0645\u0645\u0627 \u062c\u0639\u0644 Exchange Server Subscription Edition (<a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/techcommunity.microsoft.com\/blog\/exchange\/upgrading-your-organization-from-current-versions-to-exchange-server-se\/4241305\">Exchange SE<\/a>) \u0627\u0644\u062d\u0644 \u0627\u0644\u0645\u062d\u0644\u064a \u0627\u0644\u0648\u062d\u064a\u062f \u0627\u0644\u0645\u062f\u0639\u0648\u0645 \u0644\u0639\u0627\u0645 2026. \u0648\u0639\u0644\u0649 \u0627\u0644\u0631\u063a\u0645 \u0645\u0646 \u0630\u0644\u0643\u060c \u0644\u0627 \u062a\u0632\u0627\u0644 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u062a\u064f\u0634\u063a\u0644 Exchange Server 2016 \u06482013 \u0648\u062d\u062a\u0649 \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0623\u0642\u062f\u0645 \u0645\u0646 \u0630\u0644\u0643.<\/p>\n<p>\u064a\u0634\u0643\u0644 Exchange \u0647\u062f\u0641\u064b\u0627 \u0645\u063a\u0631\u064a\u064b\u0627 \u0644\u0644\u063a\u0627\u064a\u0629 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646. \u0648\u062a\u062c\u0639\u0644\u0647 \u0634\u0647\u0631\u062a\u0647 \u0648\u062a\u0639\u0642\u064a\u062f\u0647 \u0648\u0648\u0641\u0631\u0629 \u0625\u0639\u062f\u0627\u062f\u0627\u062a\u0647\u060c \u0648\u0627\u0644\u0623\u0647\u0645 \u0645\u0646 \u0630\u0644\u0643\u060c \u0625\u0645\u0643\u0627\u0646\u064a\u0629 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u064a\u0647 \u0645\u0646 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u062e\u0627\u0631\u062c\u064a\u0629\u060c \u0639\u0631\u0636\u0629 \u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u0648\u0627\u0633\u0639\u0629 \u0645\u0646 \u0627\u0644\u0647\u062c\u0645\u0627\u062a:<\/p>\n<ul>\n<li>\u0627\u0644\u062a\u0633\u0644\u0644 \u0625\u0644\u0649 \u0635\u0646\u0627\u062f\u064a\u0642 \u0627\u0644\u0628\u0631\u064a\u062f \u0639\u0628\u0631 \u0647\u062c\u0645\u0627\u062a <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.forbes.com\/sites\/daveywinder\/2025\/06\/13\/microsoft-users-warned-of-ongoing-password-spraying-attack---act-now\/\">\u0646\u0634\u0631 \u0643\u0644\u0645\u0629 \u0627\u0644\u0645\u0631\u0648\u0631<\/a> \u0623\u0648 \u0627\u0644\u062a\u0635\u064a\u0651\u062f \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0644\u064a \u0627\u0644\u0645\u0648\u062c\u0651\u064e\u0647<\/li>\n<li>\u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u062d\u0633\u0627\u0628\u0627\u062a \u0639\u0628\u0631 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644\u0627\u062a \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u0642\u062f\u064a\u0645\u0629<\/li>\n<li>\u0633\u0631\u0642\u0629 \u0631\u0633\u0627\u0626\u0644 \u0628\u0631\u064a\u062f \u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0645\u0639\u064a\u0646\u0629 \u0639\u0646 \u0637\u0631\u064a\u0642 \u062d\u0642\u0646 \u0642\u0648\u0627\u0639\u062f \u062a\u062f\u0641\u0642 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u062e\u0628\u064a\u062b \u0639\u0628\u0631 Exchange Web Services<\/li>\n<li><a target=\"_blank\" href=\"https:\/\/securelist.com\/analysis-of-attack-samples-exploiting-cve-2023-23397\/110202\/\" rel=\"noopener\">\u0627\u0644\u0627\u0633\u062a\u064a\u0644\u0627\u0621 \u0639\u0644\u0649<\/a> \u0627\u0644\u0631\u0645\u0648\u0632 \u0627\u0644\u0645\u0645\u064a\u0632\u0629 \u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u0645\u0648\u0638\u0641\u064a\u0646 \u0623\u0648 <a target=\"_blank\" href=\"https:\/\/www.kaspersky.com\/blog\/cve-2024-49040-email-spoofing-protection\/52699\/\" rel=\"noopener nofollow\">\u062a\u0632\u0648\u064a\u0631 \u0627\u0644\u0631\u0633\u0627\u0626\u0644<\/a> \u0639\u0628\u0631 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0639\u064a\u0648\u0628 \u0641\u064a \u0627\u0644\u0628\u0646\u064a\u0629 \u0627\u0644\u062a\u062d\u062a\u064a\u0629 \u0644\u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u0628\u0631\u064a\u062f \u0641\u064a Exchange<\/li>\n<li>\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0641\u064a Exchange <a target=\"_blank\" href=\"https:\/\/securelist.com\/toddycat\/106799\/\" rel=\"noopener\">\u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629<\/a> (\u0646\u0634\u0631 \u0623\u063a\u0644\u0641\u0629 \u0627\u0644\u0648\u064a\u0628) \u0639\u0644\u0649 \u0627\u0644\u062e\u0627\u062f\u0645<\/li>\n<li>\u0627\u0644\u062d\u0631\u0643\u0629 \u0627\u0644\u062c\u0627\u0646\u0628\u064a\u0629 \u0648\u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u062e\u0627\u062f\u0645\u060c \u062d\u064a\u062b <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/pst-want-shell-proxyshell-exploiting-microsoft-exchange-servers\">\u064a\u0635\u0628\u062d \u062e\u0627\u062f\u0645 Exchange \u0646\u0642\u0637\u0629 \u0627\u0646\u0637\u0644\u0627\u0642 \u0644\u0627\u0633\u062a\u0637\u0644\u0627\u0639 \u0627\u0644\u0634\u0628\u0643\u0629<\/a> \u0648\u0627\u0633\u062a\u0636\u0627\u0641\u0629 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u062a\u0648\u062c\u064a\u0647 \u0627\u0644\u062d\u0631\u0643\u0629<\/li>\n<li>\u062a\u0633\u0631\u064a\u0628 \u0631\u0633\u0627\u0626\u0644 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0639\u0644\u0649 \u0627\u0644\u0645\u062f\u0649 \u0627\u0644\u0637\u0648\u064a\u0644 \u0639\u0628\u0631 \u0639\u0645\u0644\u064a\u0627\u062a \u0632\u0631\u0639 \u0628\u0631\u0627\u0645\u062c \u0645\u062a\u062e\u0635\u0635\u0629 \u0644\u062e\u0648\u0627\u062f\u0645 Exchange<\/li>\n<\/ul>\n<p>\u0644\u0641\u0647\u0645 \u062a\u0639\u0642\u064a\u062f \u0648\u062a\u0646\u0648\u0639 \u0647\u062c\u0645\u0627\u062a Exchange \u0628\u0634\u0643\u0644 \u062d\u0642\u064a\u0642\u064a\u060c \u0645\u0646 \u0627\u0644\u0645\u0641\u064a\u062f \u0645\u0631\u0627\u062c\u0639\u0629 \u0627\u0644\u0623\u0628\u062d\u0627\u062b \u0627\u0644\u0645\u062a\u0639\u0644\u0642\u0629 \u0628\u062a\u0647\u062f\u064a\u062f\u0627\u062a <a target=\"_blank\" href=\"https:\/\/securelist.com\/ghostcontainer\/116953\/\" rel=\"noopener\">GhostContainer<\/a> \u0648<a target=\"_blank\" href=\"https:\/\/securelist.com\/owowa-credential-stealer-and-remote-access\/105219\/\" rel=\"noopener\">Owowa<\/a> \u0648<a target=\"_blank\" href=\"https:\/\/securelist.com\/cve-2022-41040-and-cve-2022-41082-zero-days-in-ms-exchange\/108364\/\" rel=\"noopener\">ProxyNotShell<\/a> \u0648<a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/new-powerexchange-malware-backdoors-microsoft-exchange-servers\/\">PowerExchange<\/a>.<\/p>\n<p>\u0625\u0646 \u062c\u0639\u0644 \u0627\u062e\u062a\u0631\u0627\u0642 Exchange \u0623\u0635\u0639\u0628 \u0639\u0644\u0649 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0648\u0627\u0644\u062d\u062f \u0645\u0646 \u062a\u0623\u062b\u064a\u0631 \u0623\u064a \u0647\u062c\u0648\u0645 \u0646\u0627\u062c\u062d \u0644\u064a\u0633 \u0645\u0633\u062a\u062d\u064a\u0644\u0627\u064b\u060c \u0644\u0643\u0646\u0647 \u064a\u062a\u0637\u0644\u0628 \u0645\u062c\u0645\u0648\u0639\u0629 \u0648\u0627\u0633\u0639\u0629 \u0645\u0646 \u0627\u0644\u062a\u062f\u0627\u0628\u064a\u0631- \u062a\u062a\u0631\u0627\u0648\u062d \u0628\u064a\u0646 \u062a\u063a\u064a\u064a\u0631\u0627\u062a \u0628\u0633\u064a\u0637\u0629 \u0641\u064a \u0627\u0644\u0625\u0639\u062f\u0627\u062f\u0627\u062a \u0648\u0639\u0645\u0644\u064a\u0627\u062a \u062a\u0631\u062d\u064a\u0644 \u0644\u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644\u0627\u062a \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u062a\u064a \u062a\u062a\u0637\u0644\u0628 \u062c\u0647\u062f\u064b\u0627 \u0643\u0628\u064a\u0631\u0627\u064b. \u0648\u0642\u062f <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/microsoft-exchange-server-security-best-practices\">\u0646\u064f\u0634\u0631 \u0645\u0624\u062e\u0631\u064b\u0627<\/a> \u0627\u0633\u062a\u0639\u0631\u0627\u0636 \u0645\u0634\u062a\u0631\u0643 \u0644\u062a\u062f\u0627\u0628\u064a\u0631 \u0627\u0644\u062f\u0641\u0627\u0639 \u0630\u0627\u062a \u0627\u0644\u0623\u0648\u0644\u0648\u064a\u0629 \u0645\u0646 \u0642\u0628\u0644 \u0648\u0643\u0627\u0644\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0648\u0627\u0644\u0628\u0646\u064a\u0629 \u0627\u0644\u062a\u062d\u062a\u064a\u0629 (CISA) \u0648\u0645\u0646\u0638\u0645\u064a\u0646 \u0622\u062e\u0631\u064a\u0646 \u0644\u0644\u0623\u0645\u0646 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a. \u0625\u0630\u0646\u060c \u0643\u064a\u0641 \u064a\u0628\u062f\u0623 \u062a\u062d\u0635\u064a\u0646 \u062e\u0627\u062f\u0645 Exchange \u0627\u0644\u0645\u062d\u0644\u064a \u0644\u062f\u064a\u0643\u061f<\/p>\n<h2>\u0627\u0644\u062a\u0631\u062d\u064a\u0644 \u0628\u0639\u064a\u062f\u064b\u0627 \u0639\u0646 \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0648\u0642\u0641 \u062f\u0639\u0645\u0647\u0627<\/h2>\n<p>\u062a\u0648\u0635\u064a \u0643\u0644 \u0645\u0646 Microsoft \u0648\u0648\u0643\u0627\u0644\u0629 CISA \u0628\u0627\u0644\u0627\u0646\u062a\u0642\u0627\u0644 \u0625\u0644\u0649 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/techcommunity.microsoft.com\/blog\/exchange\/upgrading-your-organization-from-current-versions-to-exchange-server-se\/4241305\">Exchange SE<\/a> \u0644\u062a\u0644\u0642\u064a \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0627\u0644\u0648\u0642\u062a \u0627\u0644\u0645\u0646\u0627\u0633\u0628. \u0648\u0628\u0627\u0644\u0646\u0633\u0628\u0629 \u0644\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u063a\u064a\u0631 \u0627\u0644\u0642\u0627\u062f\u0631\u0629 \u0639\u0644\u0649 \u0625\u062c\u0631\u0627\u0621 \u0647\u0630\u0627 \u0627\u0644\u062a\u062d\u0648\u064a\u0644 \u0639\u0644\u0649 \u0627\u0644\u0641\u0648\u0631\u060c \u064a\u062a\u0648\u0641\u0631 \u0627\u0634\u062a\u0631\u0627\u0643 \u0645\u062f\u0641\u0648\u0639 \u0641\u064a \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0645\u0645\u062a\u062f\u0629 (Extended Security Updates \u2013 ESU) \u0644\u0644\u0625\u0635\u062f\u0627\u0631\u064a\u0646 2016 \u06482019. \u0648\u062a\u0634\u062f\u062f Microsoft \u0639\u0644\u0649 \u0623\u0646 \u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u0645\u0646 \u0625\u0635\u062f\u0627\u0631 2016 \u0623\u0648 2019 \u0625\u0644\u0649 Exchange SE \u062a\u0636\u0627\u0647\u064a \u0641\u064a \u062a\u0639\u0642\u064a\u062f\u0647\u0627 \u062a\u062b\u0628\u064a\u062a \u062a\u062d\u062f\u064a\u062b \u062a\u0631\u0627\u0643\u0645\u064a \u0639\u0627\u062f\u064a.<\/p>\n<p>\u0625\u0630\u0627 \u0627\u062d\u062a\u062c\u062a \u0644\u0623\u064a \u0633\u0628\u0628 \u0643\u0627\u0646 \u0625\u0644\u0649 \u0625\u0628\u0642\u0627\u0621 \u0625\u0635\u062f\u0627\u0631 \u063a\u064a\u0631 \u0645\u062f\u0639\u0648\u0645 \u0642\u064a\u062f \u0627\u0644\u062a\u0634\u063a\u064a\u0644\u060c \u0641\u064a\u062c\u0628 \u0639\u0632\u0644\u0647 \u062a\u0645\u0627\u0645\u064b\u0627 \u0639\u0646 \u0643\u0644 \u0645\u0646 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629 \u0648\u0627\u0644\u062e\u0627\u0631\u062c\u064a\u0629. \u0648\u064a\u062c\u0628 \u062a\u0648\u062c\u064a\u0647 \u0643\u0644 \u062a\u062f\u0641\u0642\u0627\u062a \u0627\u0644\u0628\u0631\u064a\u062f \u0639\u0628\u0631 <a href=\"https:\/\/me.kaspersky.com\/small-to-medium-business-security\/mail-security-appliance?icid=me-ar_kdailyplacehold_acq_ona_smm__onl_b2b_kasperskydaily_wpplaceholder_______\" target=\"_blank\" rel=\"noopener\">\u0628\u0648\u0627\u0628\u0629 \u0623\u0645\u0627\u0646 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a<\/a>.<\/p>\n<h2>\u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0627\u0644\u0645\u0646\u062a\u0638\u0645\u0629<\/h2>\n<p>\u062a\u064f\u0635\u062f\u0631 Microsoft \u062a\u062d\u062f\u064a\u062b\u064a\u0646 \u062a\u0631\u0627\u0643\u0645\u064a\u064a\u0646 \u0633\u0646\u0648\u064a\u064b\u0627\u060c \u0625\u0644\u0649 \u062c\u0627\u0646\u0628 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0639\u0627\u062c\u0644\u0629 \u0627\u0644\u0634\u0647\u0631\u064a\u0629. \u0648\u062a\u062a\u0645\u062b\u0644 \u0625\u062d\u062f\u0649 \u0627\u0644\u0645\u0647\u0627\u0645 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0644\u0645\u0633\u0624\u0648\u0644\u064a Exchange \u0641\u064a \u0648\u0636\u0639 \u0639\u0645\u0644\u064a\u0629 \u0644\u0646\u0634\u0631 \u0647\u0630\u0647 \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u062f\u0648\u0646 \u062a\u0623\u062e\u064a\u0631\u060c \u0646\u0638\u0631\u064b\u0627 \u0644\u0623\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u064a\u0633\u0627\u0631\u0639 \u0625\u0644\u0649 \u062a\u0633\u0644\u064a\u062d \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629. \u0648\u064a\u0645\u0643\u0646\u0643 \u062a\u062a\u0628\u0639 \u062c\u062f\u0648\u0644 \u0627\u0644\u0625\u0635\u062f\u0627\u0631 \u0648\u0645\u062d\u062a\u0648\u064a\u0627\u062a \u0647\u0630\u0647 \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0639\u0644\u0649 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/new-features\/build-numbers-and-release-dates\">\u0635\u0641\u062d\u0629 Microsoft<\/a> \u0627\u0644\u0631\u0633\u0645\u064a\u0629. \u0648\u0644\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u062d\u0627\u0644\u0629 \u062a\u062b\u0628\u064a\u062a Exchange \u0648\u062a\u062d\u062f\u064a\u062b\u0647\u060c \u0627\u0633\u062a\u062e\u062f\u0645 \u0623\u062f\u0648\u0627\u062a \u0645\u062b\u0644 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/microsoft.github.io\/CSS-Exchange\/Setup\/SetupAssist\/\">SetupAssist<\/a> \u0648<a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/aka.ms\/ExchangeHealthChecker\">Exchange Health Checker<\/a>.<\/p>\n<h2>\u0627\u0644\u062a\u062e\u0641\u064a\u0641\u0627\u062a \u0641\u064a \u062d\u0627\u0644\u0627\u062a \u0627\u0644\u0637\u0648\u0627\u0631\u0626<\/h2>\n<p>\u0628\u0627\u0644\u0646\u0633\u0628\u0629 \u0644\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062d\u0631\u062c\u0629 \u0627\u0644\u062a\u064a \u064a\u062c\u0631\u064a \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0646\u0634\u0627\u0637\u060c \u064a\u062a\u0645 \u0639\u0627\u062f\u0629\u064b \u0646\u0634\u0631 \u0625\u0631\u0634\u0627\u062f\u0627\u062a \u0627\u0644\u062a\u062e\u0641\u064a\u0641 \u0627\u0644\u0645\u0624\u0642\u062a\u0629 \u0641\u064a <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/bg-p\/Exchange\">\u0645\u062f\u0648\u0646\u0629 Exchange<\/a> \u0648\u0639\u0644\u0649 \u0635\u0641\u062d\u0629 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/exchange\/plan-and-deploy\/post-installation-tasks\/security-best-practices\/exchange-emergency-mitigation-service\">\u0627\u0644\u062a\u062e\u0641\u064a\u0641 \u0645\u0646 \u0645\u062e\u0627\u0637\u0631 Exchange<\/a>. \u0648\u064a\u062c\u0628 \u062a\u0645\u0643\u064a\u0646 \u062e\u062f\u0645\u0629 \u0627\u0644\u062a\u062e\u0641\u064a\u0641 \u0641\u064a \u062d\u0627\u0644\u0627\u062a \u0627\u0644\u0637\u0648\u0627\u0631\u0626 (EM) \u0639\u0644\u0649 \u062e\u0648\u0627\u062f\u0645 Exchange Mailbox \u0644\u062f\u064a\u0643. \u0648\u064a\u062a\u0635\u0644 Exchange Mailbox \u062a\u0644\u0642\u0627\u0626\u064a\u064b\u0627 \u0628\u062e\u062f\u0645\u0629 \u062a\u0643\u0648\u064a\u0646 Office \u0644\u062a\u0646\u0632\u064a\u0644 \u0642\u0648\u0627\u0639\u062f \u0627\u0644\u062a\u062e\u0641\u064a\u0641 \u0648\u062a\u0637\u0628\u064a\u0642\u0647\u0627 \u0639\u0644\u0649 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0639\u0627\u062c\u0644\u0629. \u0648\u064a\u0645\u0643\u0646 \u0644\u0647\u0630\u0647 \u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a \u062a\u0639\u0637\u064a\u0644 \u0627\u0644\u062e\u062f\u0645\u0627\u062a \u0627\u0644\u0645\u0639\u0631\u0636\u0629 \u0644\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0628\u0633\u0631\u0639\u0629 \u0648\u062d\u0638\u0631 \u0627\u0644\u0637\u0644\u0628\u0627\u062a \u0627\u0644\u0636\u0627\u0631\u0629 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0642\u0648\u0627\u0639\u062f \u0625\u0639\u0627\u062f\u0629 \u0643\u062a\u0627\u0628\u0629 \u0639\u0646\u0648\u0627\u0646 URL \u0641\u064a <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/ar.wikipedia.org\/wiki\/%D8%AE%D8%A7%D8%AF%D9%85%D8%A7%D8%AA_%D9%85%D8%B9%D9%84%D9%88%D9%85%D8%A7%D8%AA_%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA\">IIS<\/a>.<\/p>\n<h2>\u062e\u0637\u0648\u0637 \u0627\u0644\u0623\u0633\u0627\u0633 \u0627\u0644\u0622\u0645\u0646\u0629<\/h2>\n<p>\u064a\u062c\u0628 \u062a\u0637\u0628\u064a\u0642 \u0645\u062c\u0645\u0648\u0639\u0629 \u0645\u0648\u062d\u062f\u0629 \u0645\u0646 \u0627\u0644\u062a\u0643\u0648\u064a\u0646\u0627\u062a\u060c \u0627\u0644\u0645\u064f\u062d\u0633\u0651\u0646\u0629 \u0644\u062a\u0644\u0628\u064a\u0629 \u0627\u062d\u062a\u064a\u0627\u062c\u0627\u062a \u0627\u0644\u0645\u0624\u0633\u0633\u0629\u060c \u0639\u0644\u0649 \u0645\u0633\u062a\u0648\u0649 \u0627\u0644\u0645\u0624\u0633\u0633\u0629 \u0628\u0623\u0643\u0645\u0644\u0647\u0627\u061b \u0648\u0644\u0627 \u064a\u0642\u062a\u0635\u0631 \u0647\u0630\u0627 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0639\u0644\u0649 \u062e\u0648\u0627\u062f\u0645 Exchange \u0641\u062d\u0633\u0628\u060c \u0628\u0644 \u064a\u0634\u0645\u0644 \u0623\u064a\u0636\u064b\u0627 \u0628\u0631\u0627\u0645\u062c \u0639\u0645\u0644\u0627\u0621 \u0627\u0644\u0628\u0631\u064a\u062f \u0639\u0628\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u0648\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u0647\u0627.<\/p>\n<p>\u0646\u0638\u0631\u064b\u0627 \u0644\u0627\u062e\u062a\u0644\u0627\u0641 \u062e\u0637\u0648\u0637 \u0623\u0633\u0633 \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0645\u0648\u0635\u0649 \u0628\u0647\u0627 \u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0646\u0638\u0627\u0645 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0648Exchange \u0627\u0644\u0645\u062e\u062a\u0644\u0641\u0629\u060c \u064a\u0634\u064a\u0631 \u062f\u0644\u064a\u0644 CISA \u0625\u0644\u0649 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/downloads.cisecurity.org\/#\/\">\u0645\u0639\u0627\u064a\u064a\u0631 CIS \u0627\u0644\u0645\u0631\u062c\u0639\u064a\u0629<\/a> \u0627\u0644\u0634\u0627\u0626\u0639\u0629 \u0648\u0627\u0644\u0645\u062a\u0627\u062d\u0629 \u0645\u062c\u0627\u0646\u064b\u0627 \u0648\u062a\u0639\u0644\u064a\u0645\u0627\u062a <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/microsoft-365-apps\/security\/security-baseline\">Microsoft<\/a>. \u0648\u062a\u0645 \u0625\u0646\u0634\u0627\u0621 \u0623\u062d\u062f\u062b \u0645\u0639\u064a\u0627\u0631 \u0645\u0631\u062c\u0639\u064a \u0644\u0648\u0643\u0627\u0644\u0629 CIS \u0644\u062e\u0627\u062f\u0645 Exchange 2019\u060c \u0644\u0643\u0646\u0647 \u064a\u0646\u0637\u0628\u0642 \u0623\u064a\u0636\u064b\u0627 \u0628\u0634\u0643\u0644 \u0643\u0627\u0645\u0644 \u0639\u0644\u0649 Exchange SE \u2013 \u0646\u0638\u0631\u064b\u0627 \u0644\u0623\u0646 \u0625\u0635\u062f\u0627\u0631 Subscription Edition \u0627\u0644\u062d\u0627\u0644\u064a \u0644\u0627 \u064a\u062e\u062a\u0644\u0641 \u0641\u064a \u062e\u064a\u0627\u0631\u0627\u062a\u0647 \u0627\u0644\u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u0643\u0648\u064a\u0646 \u0639\u0646 Exchange Server 2019 CU15.<\/p>\n<h2>\u062d\u0644\u0648\u0644 \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0645\u062e\u0635\u0635\u0629<\/h2>\n<p>\u0645\u0646 \u0627\u0644\u0623\u062e\u0637\u0627\u0621 \u0627\u0644\u0641\u0627\u062f\u062d\u0629 \u0627\u0644\u062a\u064a \u062a\u0631\u062a\u0643\u0628\u0647\u0627 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0639\u0645\u0644\u0627\u0621 EDR \u0648EPP \u0639\u0644\u0649 \u062e\u0648\u0627\u062f\u0645 Exchange \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u0647\u0645. \u0648\u0644\u0645\u0646\u0639 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u062a\u0646\u0641\u064a\u0630 \u0623\u063a\u0644\u0641\u0629 \u0627\u0644\u0648\u064a\u0628\u060c \u064a\u062d\u062a\u0627\u062c \u0627\u0644\u062e\u0627\u062f\u0645 \u0625\u0644\u0649 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0628\u0648\u0627\u0633\u0637\u0629 \u062d\u0644 \u0623\u0645\u0627\u0646 \u0645\u062b\u0644 <a href=\"https:\/\/me.kaspersky.com\/enterprise-security\/endpoint-detection-response-edr?icid=me-ar_kdailyplacehold_acq_ona_smm__onl_b2b_kasperskydaily_wpplaceholder_______\" target=\"_blank\" rel=\"noopener\">Kaspersky Endpoint Detection and Response<\/a>. \u0648\u064a\u062a\u0643\u0627\u0645\u0644 Exchange Server \u0645\u0639 <a target=\"_blank\" href=\"https:\/\/support.kaspersky.com\/KESWin\/12.5\/ar-AE\/173854.htm\" rel=\"noopener\">\u0648\u0627\u062c\u0647\u0629 \u0641\u062d\u0635 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 (AMSI)<\/a>\u060c \u0627\u0644\u062a\u064a \u062a\u062a\u064a\u062d \u0644\u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u0623\u062d\u062f\u0627\u062b \u0639\u0644\u0649 \u062c\u0627\u0646\u0628 \u062e\u0627\u062f\u0645 \u0627\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u0634\u0643\u0644 \u0641\u0639\u0627\u0644.<\/p>\n<p>\u064a\u0645\u0643\u0646 \u0644\u0644\u0642\u0627\u0626\u0645\u0629 \u0627\u0644\u0628\u064a\u0636\u0627\u0621 \u0644\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0623\u0646 \u062a\u0639\u064a\u0642 \u0628\u0634\u0643\u0644 \u0643\u0628\u064a\u0631 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0627\u0644\u0630\u064a\u0646 \u064a\u062d\u0627\u0648\u0644\u0648\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0627\u062a Exchange. \u0648\u062a\u0623\u062a\u064a \u0647\u0630\u0647 \u0627\u0644\u0645\u064a\u0632\u0629 \u0643\u062e\u0627\u0635\u064a\u0629 \u0642\u064a\u0627\u0633\u064a\u0629 \u0641\u064a \u0645\u0639\u0638\u0645 \u062d\u0644\u0648\u0644 \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0646\u0642\u0627\u0637 \u0627\u0644\u0637\u0631\u0641\u064a\u0629 \u0627\u0644\u0645\u062a\u0642\u062f\u0645\u0629 (EPP). \u0648\u0645\u0639 \u0630\u0644\u0643\u060c \u0625\u0630\u0627 \u0643\u0646\u062a \u0628\u062d\u0627\u062c\u0629 \u0625\u0644\u0649 \u062a\u0637\u0628\u064a\u0642\u0647\u0627 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0648\u0627\u062a Windows \u0627\u0644\u0623\u0635\u0644\u064a\u0629\u060c \u064a\u0645\u0643\u0646\u0643 \u062a\u0642\u064a\u064a\u062f \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u063a\u064a\u0631 \u0627\u0644\u0645\u0648\u062b\u0648\u0642\u0629 \u0639\u0628\u0631 \u0623\u062f\u0648\u0627\u062a \u0645\u062b\u0644 App Control for Business \u0623\u0648 AppLocker.<\/p>\n<p>\u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0645\u0648\u0638\u0641\u064a\u0646 \u0648\u0623\u062c\u0647\u0632\u062a\u0647\u0645\u060c \u064a\u062c\u0628 \u0639\u0644\u0649 \u0627\u0644\u062e\u0627\u062f\u0645 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062d\u0644 \u0645\u062b\u0644 <a href=\"https:\/\/me.kaspersky.com\/small-to-medium-business-security\/mail-server?icid=me-ar_kdailyplacehold_acq_ona_smm__onl_b2b_kasperskydaily_wpplaceholder_______\" target=\"_blank\" rel=\"noopener\">Kaspersky Security for Mail Server<\/a> \u0644\u062a\u0635\u0641\u064a\u0629 \u062d\u0631\u0643\u0629 \u0627\u0644\u0628\u0631\u064a\u062f. \u0648\u064a\u0639\u0627\u0644\u062c \u0647\u0630\u0627 \u0627\u0644\u062d\u0644 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u062a\u062d\u062f\u064a\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0641\u062a\u0642\u0631 \u0625\u0644\u064a\u0647\u0627 \u0623\u062f\u0648\u0627\u062a Exchange \u0627\u0644\u0645\u062d\u0644\u064a \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a \u2013 \u0645\u062b\u0644 \u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u0645\u0631\u0633\u0644 \u0639\u0628\u0631 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644\u0627\u062a SPF \u0648DKIM \u0648DMARC\u060c \u0623\u0648 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0645\u0646 \u0631\u0633\u0627\u0626\u0644 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0627\u0644\u0639\u0634\u0648\u0627\u0626\u064a \u0648\u0627\u0644\u062a\u0635\u064a\u0651\u062f \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0644\u064a \u0627\u0644\u0645\u0648\u062c\u0647 \u0627\u0644\u0645\u062a\u0637\u0648\u0631\u0629.<\/p>\n<p>\u0625\u0630\u0627 \u0644\u0645 \u064a\u062a\u0645 \u0646\u0634\u0631 \u062d\u0644 EDR \u0643\u0627\u0645\u0644 \u0644\u0623\u064a \u0633\u0628\u0628 \u0645\u0646 \u0627\u0644\u0623\u0633\u0628\u0627\u0628 \u0639\u0644\u0649 \u0627\u0644\u062e\u0627\u062f\u0645\u060c \u0641\u0645\u0646 \u0627\u0644\u0636\u0631\u0648\u0631\u064a \u0639\u0644\u0649 \u0627\u0644\u0623\u0642\u0644 \u062a\u0641\u0639\u064a\u0644 \u0628\u0631\u0646\u0627\u0645\u062c \u0645\u0643\u0627\u0641\u062d\u0629 \u0627\u0644\u0641\u064a\u0631\u0648\u0633\u0627\u062a \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u060c \u0648\u0627\u0644\u062a\u0623\u0643\u062f \u0645\u0646 \u062a\u0645\u0643\u064a\u0646 \u0642\u0627\u0639\u062f\u0629 \u201c\u0645\u0646\u0639 \u0625\u0646\u0634\u0627\u0621 \u063a\u0644\u0627\u0641 \u0627\u0644\u0648\u064a\u0628 \u0644\u0644\u062e\u0648\u0627\u062f\u0645\u201d \u0627\u0644\u062e\u0627\u0635\u0629 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/ar-sa\/defender-endpoint\/attack-surface-reduction-rules-reference\">\u0628\u062a\u0642\u0644\u064a\u0644 \u0645\u0633\u0627\u062d\u0629 \u0627\u0644\u0647\u062c\u0648\u0645<\/a> (ASR).<\/p>\n<p>\u0644\u0645\u0646\u0639 \u062a\u062f\u0647\u0648\u0631 \u0623\u062f\u0627\u0621 \u0627\u0644\u062e\u0627\u062f\u0645 \u0639\u0646\u062f \u062a\u0634\u063a\u064a\u0644 \u0628\u0631\u0646\u0627\u0645\u062c \u0645\u0643\u0627\u0641\u062d\u0629 \u0627\u0644\u0641\u064a\u0631\u0648\u0633\u0627\u062a \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u060c <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/antispam-and-antimalware\/windows-antivirus-software\">\u062a\u0648\u0635\u064a<\/a> Microsoft \u0628\u0627\u0633\u062a\u062b\u0646\u0627\u0621 \u0645\u0644\u0641\u0627\u062a \u0648\u0645\u062c\u0644\u062f\u0627\u062a \u0645\u0639\u064a\u0646\u0629 \u0645\u0646 \u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u0641\u062d\u0635.<\/p>\n<h2>\u062a\u0642\u064a\u064a\u062f \u0627\u0644\u0648\u0635\u0648\u0644 \u0627\u0644\u0625\u062f\u0627\u0631\u064a<\/h2>\n<p>\u063a\u0627\u0644\u0628\u064b\u0627 \u0645\u0627 \u064a\u0631\u0641\u0639 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0639\u0646 \u0637\u0631\u064a\u0642 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0645\u0631\u0643\u0632 \u0625\u062f\u0627\u0631\u0629 Exchange (EAC) \u0648\u0627\u0644\u0627\u062a\u0635\u0627\u0644 \u0639\u0646 \u0628\u064f\u0639\u062f \u0639\u0646 \u0637\u0631\u064a\u0642 PowerShell. \u0648\u062a\u0645\u0644\u064a \u0623\u0641\u0636\u0644 \u0627\u0644\u0645\u0645\u0627\u0631\u0633\u0627\u062a \u0625\u062a\u0627\u062d\u0629 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0647\u0630\u0647 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0641\u0642\u0637 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0639\u062f\u062f \u062b\u0627\u0628\u062a \u0645\u0646 \u0645\u062d\u0637\u0627\u062a \u0627\u0644\u0639\u0645\u0644 \u0630\u0627\u062a \u0627\u0644\u0648\u0635\u0648\u0644 \u0627\u0644\u0645\u0645\u064a\u0632 (PAWs). \u0648\u064a\u0645\u0643\u0646 \u0641\u0631\u0636 \u0630\u0644\u0643 \u0639\u0628\u0631 \u0642\u0648\u0627\u0639\u062f \u062c\u062f\u0627\u0631 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0639\u0644\u0649 \u062e\u0648\u0627\u062f\u0645 Exchange \u0646\u0641\u0633\u0647\u0627\u060c \u0623\u0648 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062c\u062f\u0627\u0631 \u0627\u0644\u062d\u0645\u0627\u064a\u0629. \u0648\u064a\u0645\u0643\u0646 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/clients\/client-access-rules\/client-access-rules\">\u0644\u0642\u0648\u0627\u0639\u062f \u0648\u0635\u0648\u0644 \u0627\u0644\u0639\u0645\u064a\u0644<\/a> \u0627\u0644\u0645\u0636\u0645\u0646\u0629 \u0641\u064a Exchange \u0623\u064a\u0636\u064b\u0627 \u062a\u0648\u0641\u064a\u0631 \u0641\u0627\u0626\u062f\u0629 \u0645\u062d\u062f\u0648\u062f\u0629 \u0641\u064a \u0647\u0630\u0627 \u0627\u0644\u0633\u064a\u0646\u0627\u0631\u064a\u0648\u060c \u0644\u0643\u0646\u0647\u0627 \u0644\u0627 \u062a\u0633\u062a\u0637\u064a\u0639 \u0645\u0648\u0627\u062c\u0647\u0629 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 PowerShell.<\/p>\n<h2>\u0627\u0639\u062a\u0645\u0627\u062f Kerberos \u0648SMB \u0628\u062f\u0644\u0627\u064b \u0645\u0646 NTLM<\/h2>\n<p>\u062a\u0639\u0645\u0644 Microsoft \u062a\u062f\u0631\u064a\u062c\u064a\u064b\u0627 \u0639\u0644\u0649 \u0627\u0644\u062a\u062e\u0644\u0635 \u0627\u0644\u062a\u062f\u0631\u064a\u062c\u064a \u0645\u0646 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644\u0627\u062a \u0627\u0644\u0634\u0628\u0643\u0629 \u0648\u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u0642\u062f\u064a\u0645\u0629. \u0648\u062a\u064f\u0639\u0637\u0651\u0644 \u0639\u0645\u0644\u064a\u0627\u062a \u062a\u062b\u0628\u064a\u062a Windows \u0627\u0644\u062d\u062f\u064a\u062b\u0629 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644\u064a SMBv1 \u0648NTLMv1 \u0628\u0634\u0643\u0644 \u0641\u062a\u0631\u0627\u0636\u064a\u060c \u0648\u0645\u0646 \u0627\u0644\u0645\u0642\u0631\u0631 \u0623\u0646 \u062a\u0639\u0645\u0644 \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0642\u0628\u0644\u064a\u0629 \u0639\u0644\u0649 \u062a\u0639\u0637\u064a\u0644 NTLMv2. \u0648\u0628\u062f\u0621\u064b\u0627 \u0645\u0646 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/techcommunity.microsoft.com\/blog\/exchange\/exchange-server-roadmap-update\/4132742\">\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u062a\u0631\u0627\u0643\u0645\u064a \u0627\u0644\u0623\u0648\u0644 \u0644\u062e\u0627\u062f\u0645 Exchange SE<\/a>\u060c \u0633\u064a\u062a\u0645 \u0627\u0633\u062a\u0628\u062f\u0627\u0644 NTLMv2 \u0644\u064a\u062d\u0644 \u0645\u062d\u0644\u0647 Kerberos\u060c \u0627\u0644\u0630\u064a \u064a\u062a\u0645 \u062a\u0646\u0641\u064a\u0630\u0647 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 MAPI \u0639\u0628\u0631 HTTP\/ \u0643\u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a.<\/p>\n<p>\u064a\u062c\u0628 \u0639\u0644\u0649 \u0641\u0631\u0642 \u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0648\u0627\u0644\u0623\u0645\u0627\u0646 \u0625\u062c\u0631\u0627\u0621 \u062a\u062f\u0642\u064a\u0642 \u0634\u0627\u0645\u0644 \u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 \u0627\u0644\u0642\u062f\u064a\u0645 \u062f\u0627\u062e\u0644 \u0628\u0646\u064a\u062a\u0647\u0627 \u0627\u0644\u062a\u062d\u062a\u064a\u0629\u060c \u0648\u0648\u0636\u0639 \u062e\u0637\u0629 \u0644\u0644\u062a\u0631\u062d\u064a\u0644 \u0625\u0644\u0649 \u0637\u0631\u0642 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u062d\u062f\u064a\u062b\u0629 \u0627\u0644\u0623\u0643\u062b\u0631 \u0623\u0645\u0627\u0646\u064b\u0627.<\/p>\n<h2>\u0637\u0631\u0642 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u062d\u062f\u064a\u062b\u0629<\/h2>\n<p>\u0628\u062f\u0621\u064b\u0627 \u0645\u0646 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u062a\u0631\u0627\u0643\u0645\u064a \u0631\u0642\u0645 13 \u0644\u062e\u0627\u062f\u0645 Exchange 2019\u060c \u064a\u0645\u0643\u0646 \u0644\u0644\u0639\u0645\u0644\u0627\u0621 \u0627\u0644\u0627\u0633\u062a\u0641\u0627\u062f\u0629 \u0645\u0646 \u0645\u0632\u064a\u062c \u0645\u0646 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644\u0627\u062a OAuth 2.0 \u0648MFA \u0648ADFS \u0644\u062a\u062d\u0642\u064a\u0642 \u0645\u0635\u0627\u062f\u0642\u0629 \u062e\u0627\u062f\u0645 \u0642\u0648\u064a\u0629 \u2013 \u0625\u0637\u0627\u0631 \u0639\u0645\u0644 \u064a\u064f\u0639\u0631\u0641 \u0628\u0627\u0633\u0645 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/plan-and-deploy\/post-installation-tasks\/enable-modern-auth-in-exchange-server-on-premises?view=exchserver-2019\">\u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u062d\u062f\u064a\u062b\u0629<\/a> \u0623\u0648 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u062d\u062f\u064a\u062b\u0629 \u0644\u0644\u0627\u062e\u062a\u0635\u0627\u0631. \u0648\u0628\u0647\u0630\u0647 \u0627\u0644\u0637\u0631\u064a\u0642\u0629\u060c \u0644\u0627 \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0639\u0644\u0628\u0629 \u0628\u0631\u064a\u062f \u0625\u0644\u0627 \u0628\u0639\u062f \u0625\u0643\u0645\u0627\u0644 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u0639\u0648\u0627\u0645\u0644 (MFA) \u0628\u0646\u062c\u0627\u062d \u0639\u0628\u0631 ADFS\u060c \u0644\u064a\u0642\u0648\u0645 \u062e\u0627\u062f\u0645 Exchange \u0628\u0639\u062f \u0630\u0644\u0643 \u0628\u0627\u0633\u062a\u0642\u0628\u0627\u0644 \u0631\u0645\u0632 \u0648\u0635\u0648\u0644 \u0635\u0627\u0644\u062d \u0645\u0646 \u062e\u0627\u062f\u0645 ADFS. \u0648\u0628\u0645\u062c\u0631\u062f \u062a\u0631\u062d\u064a\u0644 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0625\u0644\u0649 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u062d\u062f\u064a\u062b\u0629\u060c \u064a\u062c\u0628 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/plan-and-deploy\/post-installation-tasks\/disable-basic-authentication-on-exchange-server-virtual-directories\">\u062a\u0639\u0637\u064a\u0644<\/a> \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u0639\u0644\u0649 \u062e\u0627\u062f\u0645 Exchange.<\/p>\n<h2>\u062a\u0645\u0643\u064a\u0646 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0645\u0648\u0633\u0639\u0629<\/h2>\n<p>\u062a\u0648\u0641\u0631 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/plan-and-deploy\/post-installation-tasks\/security-best-practices\/exchange-extended-protection?view=exchserver-2019\">\u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0645\u0648\u0633\u0639\u0629<\/a> (EP) \u062f\u0641\u0627\u0639\u064b\u0627 \u0636\u062f \u0647\u062c\u0645\u0627\u062a <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/web.archive.org\/web\/20251010130732\/https:\/www.microsoft.com\/en-us\/msrc\/blog\/2024\/12\/mitigating-ntlm-relay-attacks-by-default\/\">\u062a\u0631\u062d\u064a\u0644 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 NTLM<\/a> \u0648\u0627\u0644\u062e\u0635\u0645 \u0641\u064a \u0627\u0644\u0648\u0633\u0637 \u0648\u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u0645\u0645\u0627\u062b\u0644\u0629. \u0648\u062a\u0639\u0632\u0632 \u0647\u0630\u0647 \u0627\u0644\u062e\u0627\u0635\u064a\u0629 \u0623\u0645\u0627\u0646 \u0637\u0628\u0642\u0629 \u0627\u0644\u0646\u0642\u0644 \u0627\u0644\u0622\u0645\u0646\u0629 (TLS) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0631\u0645\u0632 \u0631\u0628\u0637 \u0627\u0644\u0642\u0646\u0627\u0629 (CBT). \u0648\u0625\u0630\u0627 \u0633\u0631\u0642 \u0645\u0647\u0627\u062c\u0645 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0627\u0639\u062a\u0645\u0627\u062f \u0623\u0648 \u0631\u0645\u0632\u064b\u0627 \u0645\u0645\u064a\u0632\u064b\u0627\u060c \u0648\u062d\u0627\u0648\u0644 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0641\u064a \u062c\u0644\u0633\u0629 TLS \u0645\u062e\u062a\u0644\u0641\u0629\u060c \u0641\u0633\u0648\u0641 \u064a\u0646\u0647\u064a \u0627\u0644\u062e\u0627\u062f\u0645 \u0627\u0644\u0627\u062a\u0635\u0627\u0644. \u0648\u0644\u062a\u0645\u0643\u064a\u0646 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0645\u0648\u0633\u0639\u0629\u060c \u064a\u062c\u0628 \u062a\u0643\u0648\u064a\u0646 \u062c\u0645\u064a\u0639 \u062e\u0648\u0627\u062f\u0645 Exchange \u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0625\u0635\u062f\u0627\u0631 \u0646\u0641\u0633\u0647 \u0645\u0646 TLS.<\/p>\n<p>\u062a\u0643\u0648\u0646 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0645\u0648\u0633\u0639\u0629 \u0646\u0634\u0637\u0629 \u0628\u0634\u0643\u0644 \u0627\u0641\u062a\u0631\u0627\u0636\u064a \u0641\u064a \u0639\u0645\u0644\u064a\u0627\u062a \u062a\u062b\u0628\u064a\u062a \u0627\u0644\u062e\u0627\u062f\u0645 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u062a\u0628\u062f\u0623 \u0628\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u062a\u0631\u0627\u0643\u0645\u064a \u0631\u0642\u0645 14 \u0644\u062e\u0627\u062f\u0645 Exchange 2019.<\/p>\n<h2>\u0625\u0635\u062f\u0627\u0631\u0627\u062a TLS \u0627\u0644\u0622\u0645\u0646\u0629<\/h2>\n<p>\u064a\u062c\u0628 \u062a\u0643\u0648\u064a\u0646 \u0627\u0644\u0628\u0646\u064a\u0629 \u0627\u0644\u062a\u062d\u062a\u064a\u0629 \u0644\u0644\u062e\u0627\u062f\u0645 \u0628\u0623\u0643\u0645\u0644\u0647\u0627\u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u062c\u0645\u064a\u0639 \u062e\u0648\u0627\u062f\u0645 Exchange\u060c \u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0625\u0635\u062f\u0627\u0631 TLS \u0646\u0641\u0633\u0647: 1.2 \u0623\u0648 \u0645\u0646 \u0627\u0644\u0646\u0627\u062d\u064a\u0629 \u0627\u0644\u0645\u062b\u0627\u0644\u064a\u0629\u060c 1.3. \u0648\u062a\u0648\u0641\u0631 Microsoft <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/plan-and-deploy\/post-installation-tasks\/security-best-practices\/exchange-tls-configuration\">\u0625\u0631\u0634\u0627\u062f\u0627\u062a \u0645\u0641\u0635\u0644\u0629<\/a> \u062d\u0648\u0644 \u0627\u0644\u062a\u0643\u0648\u064a\u0646 \u0627\u0644\u0623\u0645\u062b\u0644 \u0648\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0636\u0631\u0648\u0631\u064a\u0629 \u0645\u0646 \u0627\u0644\u0645\u062a\u0637\u0644\u0628\u0627\u062a \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629. \u0648\u064a\u0645\u0643\u0646\u0643 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0628\u0631\u0646\u0627\u0645\u062c \u0627\u0644\u0646\u0635\u064a <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/microsoft.github.io\/CSS-Exchange\/Diagnostics\/HealthChecker\/TLSConfigurationCheck\/\">\u0644\u0623\u062f\u0627\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0633\u0644\u0627\u0645\u0629<\/a> \u0644\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0648\u062a\u0648\u062d\u064a\u062f \u0647\u0630\u0647 \u0627\u0644\u0625\u0639\u062f\u0627\u062f\u0627\u062a.<\/p>\n<h2>HSTS<\/h2>\n<p>\u0644\u0636\u0645\u0627\u0646 \u062d\u0645\u0627\u064a\u0629 \u062c\u0645\u064a\u0639 \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0628\u0648\u0627\u0633\u0637\u0629 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 TLS\u060c \u064a\u062c\u0628 \u0639\u0644\u064a\u0643 \u0623\u064a\u0636\u064b\u0627 \u062a\u0643\u0648\u064a\u0646 \u0645\u064a\u0632\u0629 \u0623\u0645\u0627\u0646 \u0646\u0642\u0644 HTTP \u0627\u0644\u0635\u0627\u0631\u0645 (HSTS). \u0648\u064a\u0633\u0627\u0639\u062f \u0647\u0630\u0627 \u0639\u0644\u0649 \u0645\u0646\u0639 \u0628\u0639\u0636 \u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062e\u0635\u0645 \u0641\u064a \u0627\u0644\u0645\u0646\u062a\u0635\u0641 (AitM). \u0648\u0628\u0639\u062f \u062a\u0637\u0628\u064a\u0642 \u062a\u063a\u064a\u064a\u0631\u0627\u062a \u062a\u0643\u0648\u064a\u0646 Exchange Server <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/plan-and-deploy\/post-installation-tasks\/security-best-practices\/configure-http-strict-transport-security-in-exchange-server\">\u0627\u0644\u0645\u0648\u0635\u0649 \u0628\u0647\u0627 \u0645\u0646 \u0642\u0628\u0644 Microsoft<\/a>\u060c \u0633\u064a\u062a\u0645 \u0625\u062c\u0628\u0627\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0628\u062e\u062f\u0645\u0629 Outlook \u0639\u0644\u0649 \u0627\u0644\u0648\u064a\u0628 (OWA) \u0648\u0645\u0631\u0643\u0632 \u0625\u062f\u0627\u0631\u0629 Exchange (EAC) \u0639\u0644\u0649 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u062a\u0634\u0641\u064a\u0631.<\/p>\n<h2>\u0646\u0637\u0627\u0642\u0627\u062a \u0627\u0644\u062a\u0646\u0632\u064a\u0644<\/h2>\n<p>\u062a\u0648\u0641\u0631 \u0645\u064a\u0632\u0629 \u201d <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/plan-and-deploy\/post-installation-tasks\/security-best-practices\/exchange-download-domains\">\u0646\u0637\u0627\u0642\u0627\u062a \u0627\u0644\u062a\u0646\u0632\u064a\u0644\u201d<\/a> \u062d\u0645\u0627\u064a\u0629 \u0636\u062f \u0628\u0639\u0636 \u0647\u062c\u0645\u0627\u062a \u062a\u0632\u0648\u064a\u0631 \u0627\u0644\u0637\u0644\u0628\u0627\u062a \u0639\u0628\u0631 \u0627\u0644\u0645\u0648\u0627\u0642\u0639 \u0648\u0633\u0631\u0642\u0629 \u0645\u0644\u0641\u0627\u062a \u062a\u0639\u0631\u064a\u0641 \u0627\u0644\u0627\u0631\u062a\u0628\u0627\u0637\u060c \u0648\u0630\u0644\u0643 \u0639\u0628\u0631 \u0646\u0642\u0644 \u0639\u0645\u0644\u064a\u0627\u062a \u062a\u0646\u0632\u064a\u0644 \u0627\u0644\u0645\u0631\u0641\u0642\u0627\u062a \u0625\u0644\u0649 \u0646\u0637\u0627\u0642 \u0645\u062e\u062a\u0644\u0641 \u0639\u0646 \u0627\u0644\u0646\u0637\u0627\u0642 \u0627\u0644\u0630\u064a \u064a\u0633\u062a\u0636\u064a\u0641 \u062e\u062f\u0645\u0629 Outlook \u0639\u0644\u0649 \u0627\u0644\u0648\u064a\u0628 \u0644\u0644\u0645\u0624\u0633\u0633\u0629. \u0648\u064a\u0641\u0635\u0644 \u0647\u0630\u0627 \u062a\u062d\u0645\u064a\u0644 \u0648\u0627\u062c\u0647\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 (UI) \u0648\u0642\u0627\u0626\u0645\u0629 \u0627\u0644\u0631\u0633\u0627\u0626\u0644 \u0639\u0646 \u062a\u0646\u0632\u064a\u0644 \u0645\u0631\u0641\u0642\u0627\u062a \u0627\u0644\u0645\u0644\u0641\u0627\u062a.<\/p>\n<h2>\u0646\u0645\u0648\u0630\u062c \u0627\u0644\u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u0645\u0633\u062a\u0646\u062f \u0625\u0644\u0649 \u0627\u0644\u062f\u0648\u0631<\/h2>\n<p>\u064a\u0637\u0628\u0651\u0642 Exchange Server \u0646\u0645\u0648\u0630\u062c \u0627\u0644\u062a\u062d\u0643\u0645 \u0628\u0627\u0644\u0648\u0635\u0648\u0644 \u0627\u0644\u0645\u0633\u062a\u0646\u062f \u0625\u0644\u0649 \u0627\u0644\u062f\u0648\u0631 (RBAC) \u0644\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0648\u0627\u0644\u0645\u0633\u0624\u0648\u0644\u064a\u0646 \u0630\u0648\u064a \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a. \u0648\u062a\u064f\u0634\u064a\u0631 \u0648\u0643\u0627\u0644\u0629 CISA \u0625\u0644\u0649 \u0623\u0646 \u0627\u0644\u062d\u0633\u0627\u0628\u0627\u062a \u0630\u0627\u062a \u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0645\u0633\u0624\u0648\u0644 AD \u063a\u0627\u0644\u0628\u064b\u0627 \u0645\u0627 \u062a\u064f\u0633\u062a\u062e\u062f\u0645 \u0623\u064a\u0636\u064b\u0627 \u0644\u0625\u062f\u0627\u0631\u0629 Exchange. \u0648\u0641\u064a \u0647\u0630\u0627 \u0627\u0644\u062a\u0643\u0648\u064a\u0646\u060c \u064a\u0624\u062f\u064a \u0627\u062e\u062a\u0631\u0627\u0642 \u062e\u0627\u062f\u0645 Exchange \u0639\u0644\u0649 \u0627\u0644\u0641\u0648\u0631 \u0625\u0644\u0649 \u0627\u062e\u062a\u0631\u0627\u0642 \u0643\u0627\u0645\u0644 \u0644\u0644\u0646\u0637\u0627\u0642. \u0644\u0630\u0627\u060c \u0645\u0646 \u0627\u0644\u0636\u0631\u0648\u0631\u064a \u0627\u0633\u062a\u062e\u062f\u0627\u0645 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/permissions\/split-permissions\/configure-exchange-for-split-permissions?view=exchserver-2019\">\u0627\u0644\u0623\u0630\u0648\u0646\u0627\u062a \u0627\u0644\u0645\u0642\u0633\u0651\u0645\u0629<\/a> \u0648\u0646\u0645\u0648\u0630\u062c RBAC \u0644\u0641\u0635\u0644 \u0625\u062f\u0627\u0631\u0629 Exchange \u0639\u0646 \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0627\u0644\u0625\u062f\u0627\u0631\u064a\u0629 \u0627\u0644\u0623\u062e\u0631\u0649. \u0648\u064a\u0642\u0644\u0644 \u0647\u0630\u0627 \u0645\u0646 \u0639\u062f\u062f \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0648\u0627\u0644\u0645\u0633\u0624\u0648\u0644\u064a\u0646 \u0627\u0644\u0630\u064a\u0646 \u064a\u062a\u0645\u062a\u0639\u0648\u0646 \u0628\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0645\u0641\u0631\u0637\u0629.<\/p>\n<h2>\u062a\u0648\u0642\u064a\u0639 \u062a\u062f\u0641\u0642 PowerShell<\/h2>\n<p>\u064a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0645\u0633\u0624\u0648\u0644\u0648\u0646 \u0641\u064a \u0643\u062b\u064a\u0631 \u0627\u0644\u0623\u062d\u064a\u0627\u0646 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0646\u0635\u064a\u0629 \u0644\u0623\u062c\u0644 PowerShell \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629 \u0628\u0627\u0633\u0645 \u0623\u0648\u0627\u0645\u0631 cmdlets \u0644\u062a\u0639\u062f\u064a\u0644 \u0627\u0644\u0625\u0639\u062f\u0627\u062f\u0627\u062a \u0648\u0625\u062f\u0627\u0631\u0629 \u062e\u0648\u0627\u062f\u0645 Exchange \u0639\u0628\u0631 Exchange Management Shell (EMS). \u0645\u0646 \u0627\u0644\u0646\u0627\u062d\u064a\u0629 \u0627\u0644\u0645\u062b\u0627\u0644\u064a\u0629\u060c \u064a\u062c\u0628 \u062a\u0639\u0637\u064a\u0644 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 PowerShell \u0639\u0646 \u0628\u064f\u0639\u062f. \u0648\u0639\u0646\u062f \u062a\u0645\u0643\u064a\u0646\u0647\u060c \u064a\u062c\u0628 \u062d\u0645\u0627\u064a\u0629 \u062a\u062f\u0641\u0642\u0627\u062a \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0645\u0631\u0633\u0644\u0629 \u0625\u0644\u0649 \u0627\u0644\u062e\u0627\u062f\u0645 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/plan-and-deploy\/post-installation-tasks\/security-best-practices\/exchange-serialization-payload-sign?view=exchserver-2019\">\u0634\u0647\u0627\u062f\u0627\u062a<\/a>. \u0648\u0627\u0639\u062a\u0628\u0627\u0631\u064b\u0627 \u0645\u0646 \u0646\u0648\u0641\u0645\u0628\u0631 2023\u060c \u062a\u0645 \u062a\u0645\u0643\u064a\u0646 \u0647\u0630\u0627 \u0627\u0644\u0625\u0639\u062f\u0627\u062f \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u064b\u0627 \u0641\u064a \u0625\u0635\u062f\u0627\u0631\u0627\u062a Exchange 2013 \u06482016 \u06482019.<\/p>\n<h2>\u062d\u0645\u0627\u064a\u0629 \u0631\u0624\u0648\u0633 \u0631\u0633\u0627\u0626\u0644 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a<\/h2>\n<p>\u0641\u064a \u0646\u0648\u0641\u0645\u0628\u0631 2024\u060c \u0642\u062f\u0645\u062a Microsoft \u062d\u0645\u0627\u064a\u0629 \u0645\u0639\u0632\u0632\u0629 \u0636\u062f \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0646\u0637\u0648\u064a \u0639\u0644\u0649 \u062a\u0632\u0648\u064a\u0631 \u0631\u0624\u0648\u0633 \u0631\u0633\u0627\u0626\u0644 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a P2 FROM\u060c \u0645\u0645\u0627 \u062c\u0639\u0644 \u0631\u0633\u0627\u0626\u0644 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u062a\u0628\u062f\u0648 \u0644\u0644\u0636\u062d\u0627\u064a\u0627 \u0648\u0643\u0623\u0646\u0647\u0627 \u0645\u0631\u0633\u0644\u0629 \u0645\u0646 \u062c\u0647\u0629 \u0645\u0648\u062b\u0648\u0642\u0629. \u0648\u062a\u062d\u062f\u062f \u0642\u0648\u0627\u0639\u062f \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0622\u0646 \u0639\u0644\u0627\u0645\u0629 \u0639\u0644\u0649 \u0631\u0633\u0627\u0626\u0644 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0627\u0644\u062a\u064a \u064a\u064f\u062d\u062a\u0645\u0644 \u0641\u064a\u0647\u0627 \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u0647\u0630\u0647 \u0627\u0644\u0631\u0624\u0648\u0633. <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/plan-and-deploy\/post-installation-tasks\/security-best-practices\/exchange-non-compliant-p2from-detection?view=exchserver-2019\">\u0648\u064a\u062c\u0628 \u0623\u0644\u0627 \u064a\u0642\u0648\u0645 \u0627\u0644\u0645\u0633\u0624\u0648\u0644\u0648\u0646 \u0628\u062a\u0639\u0637\u064a\u0644 \u0647\u0630\u0647 \u0627\u0644\u062d\u0645\u0627\u064a\u0629<\/a>\u060c \u0648\u064a\u062c\u0628 \u0639\u0644\u064a\u0647\u0645 \u0625\u0639\u0627\u062f\u0629 \u062a\u0648\u062c\u064a\u0647 \u0631\u0633\u0627\u0626\u0644 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0627\u0644\u0645\u0634\u0628\u0648\u0647\u0629 \u0627\u0644\u062a\u064a \u062a\u062d\u0645\u0644 \u0631\u0623\u0633\u064b\u0627 \u0645\u0646 \u0646\u0648\u0639 X-MS-Exchange-P2FromRegexMatch \u0625\u0644\u0649 \u062e\u0628\u0631\u0627\u0621 \u0627\u0644\u0623\u0645\u0627\u0646 \u0644\u0625\u062c\u0631\u0627\u0621 \u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u062a\u062d\u0644\u064a\u0644.<\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"kaspersky-next\">\n","protected":false},"excerpt":{"rendered":"<p>\u0625\u0644\u064a\u0643 \u0643\u064a\u0641\u064a\u0629 \u0627\u0644\u062a\u062e\u0641\u064a\u0641 \u0645\u0646 \u0645\u062e\u0627\u0637\u0631 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u0648\u062c\u0651\u0647\u0629 \u0639\u0644\u0649 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0644\u0645\u0624\u0633\u0633\u062a\u0643.<\/p>\n","protected":false},"author":2722,"featured_media":13055,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[10],"tags":[1779,2298,1288,566,146,933,484,991,970,1194],"class_list":{"0":"post-13038","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-tips","8":"tag-bec","9":"tag-exchange","10":"tag-microsoft","11":"tag-566","12":"tag-146","13":"tag-933","14":"tag-484","15":"tag-991","16":"tag-970","17":"tag-1194"},"hreflang":[{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/exchange-se-hardening-2026\/13038\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/exchange-se-hardening-2026\/29882\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/exchange-se-hardening-2026\/24962\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/exchange-se-hardening-2026\/29769\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/exchange-se-hardening-2026\/28827\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/exchange-se-hardening-2026\/31718\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/exchange-se-hardening-2026\/30373\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/exchange-se-hardening-2026\/40949\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/exchange-se-hardening-2026\/54835\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/exchange-se-hardening-2026\/23455\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/exchange-se-hardening-2026\/32989\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/exchange-se-hardening-2026\/35691\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/exchange-se-hardening-2026\/35319\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/me.kaspersky.com\/blog\/tag\/%d8%a7%d9%84%d8%a8%d8%b1%d9%8a%d8%af-%d8%a7%d9%84%d8%a5%d9%84%d9%83%d8%aa%d8%b1%d9%88%d9%86%d9%8a\/","name":"\u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a"},"_links":{"self":[{"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/13038","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2722"}],"replies":[{"embeddable":true,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=13038"}],"version-history":[{"count":2,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/13038\/revisions"}],"predecessor-version":[{"id":13065,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/13038\/revisions\/13065"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/13055"}],"wp:attachment":[{"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=13038"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=13038"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=13038"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}