Ensure all web applications use HTTPS

AltaNivel 1Automatizadasharepoint

Descripción

Web applications served over HTTP expose credentials and authentication cookies. Prints the number of web applications whose URL is not HTTPS (expected 0). Run on a SharePoint farm server as a farm administrator; the audit loads the Microsoft.SharePoint.PowerShell snap-in and fails if it cannot.

Cómo se verifica

Método de auditoría: Comando de shell

shell

$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction Stop }; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { throw 'SharePoint cmdlets are not available' }; $bad = @(Get-SPWebApplication -ErrorAction Stop | Where-Object { $_.Url -notlike 'https://*' }); $bad.Count

Salida esperada: 0

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Extend or reconfigure each web application with an HTTPS binding and alternate access mapping (New-SPAlternateURL / Set-SPAlternateURL), bind a trusted certificate in IIS, then remove the HTTP zone.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: sharepointtransport
Referencia: CIS Microsoft SharePoint Server Benchmark - Web applications / SSL (verify section number for your release)

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target sharepoint