TMA-SHAREPOINT-3.2
Ensure SharePoint implements an information system isolation boundary that minimizes the number of non-security functions included within the boundary containing security functions.
Description
Review the SharePoint server configuration to ensure an information system isolation boundary that minimizes the number of non-security functions included within the boundary containing security functions are implemented. Manual review.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
On the server hosting Central Administration open IIS Manager > Sites > SharePoint Central Administration v4 > Edit Bindings. Verify the site is bound to an out-of-band (management) or non-production IP address rather than all unassigned/production addresses.
How it is fixed
Fix method: Guidance or infrastructure patch
IIS Manager > SharePoint Central Administration v4 > Edit Bindings: bind the site to an out-of-band (OOB) management IP address.
Properties
- Operating systems
- Any
- Tags
- sharepointnetworkcentral-admin
- Reference
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.2 Ensure SharePoint implements an information system isolation boundary that minimizes the number of non-security functions included within the boundary containing security functions.