Ensure all web applications use HTTPS

TinggiLevel 1Otomatissharepoint

Deskripsi

Web applications served over HTTP expose credentials and authentication cookies. Prints the number of web applications whose URL is not HTTPS (expected 0). Run on a SharePoint farm server as a farm administrator; the audit loads the Microsoft.SharePoint.PowerShell snap-in and fails if it cannot.

Cara pemeriksaan

Metode audit: Perintah shell

shell

$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction Stop }; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { throw 'SharePoint cmdlets are not available' }; $bad = @(Get-SPWebApplication -ErrorAction Stop | Where-Object { $_.Url -notlike 'https://*' }); $bad.Count

Output yang diharapkan: 0

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Extend or reconfigure each web application with an HTTPS binding and alternate access mapping (New-SPAlternateURL / Set-SPAlternateURL), bind a trusted certificate in IIS, then remove the HTTP zone.

Properti

Sistem operasi: Apa saja
Tag: sharepointtransport
Referensi: CIS Microsoft SharePoint Server Benchmark - Web applications / SSL (verify section number for your release)

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target sharepoint