Microsoft SharePoint Server
TMA-SHAREPOINT-3.2
Ensure SharePoint implements an information system isolation boundary that minimizes the number of non-security functions included within the boundary containing security functions.
MediumLevel 1Manual reviewsharepoint
Description
Review the SharePoint server configuration to ensure an information system isolation boundary that minimizes the number of non-security functions included within the boundary containing security functions are implemented. Manual review.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
On the server hosting Central Administration open IIS Manager > Sites > SharePoint Central Administration v4 > Edit Bindings. Verify the site is bound to an out-of-band (management) or non-production IP address rather than all unassigned/production addresses.
How it is fixed
Fix method: Guidance or infrastructure patch
IIS Manager > SharePoint Central Administration v4 > Edit Bindings: bind the site to an out-of-band (OOB) management IP address.
Properties
- Operating systems
- Any
- Tags
- sharepointnetworkcentral-admin
- Reference
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.2 Ensure SharePoint implements an information system isolation boundary that minimizes the number of non-security functions included within the boundary containing security functions.