Ensure specific whitelisted IP addresses, IP address ranges, and/or domains are set

MittelStufe 1Manuelle Prüfungsharepoint

Beschreibung

Access to the SharePoint web application should be restricted to a certain group of users. Typically, this is done through restricting IP addresses to selectively allow known and approved user populations. Manual review.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

In IIS Manager select the 'SharePoint Central Administration v4' site > IP Address and Domain Restrictions. Verify allow entries list only approved administrative IP addresses, ranges and/or domains, and that unlisted clients are denied.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

IIS Manager > SharePoint Central Administration v4 > IP Address and Domain Restrictions > Add Allow Entry for each approved admin address/range; set the default for unspecified clients to Deny.

Eigenschaften

Betriebssysteme: Beliebig
Tags: sharepointnetworkcentral-admin
Referenz: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 1.3 Ensure specific whitelisted IP addresses, IP address ranges, and/or domains are set