Ensure SharePoint implements security functions as a layered structure minimizing interactions between layers of the design and avoiding any dependence by lower layers on the functionality or correctness of higher layers.

MoyenneNiveau 1Revue manuellesharepoint

Description

SharePoint must implement security functions as a layered structure minimizing interactions between layers of the design and avoiding any dependence by lower layers on the functionality or correctness of higher layers. Manual review.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Finding if: the Central Administration server is in the DMZ; Central Administration can be reached from a production network without first connecting to the management VPN; or a remote desktop session to a SharePoint server can be opened from a production network without the management VPN.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Move Central Administration servers to an isolated management network segment reachable only via the management VPN.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: sharepointnetwork
Référence: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.3 Ensure SharePoint implements security functions as a layered structure minimizing interactions between layers of the design and avoiding any dependence by lower layers on the functionality or correctness of higher layers.