TMA-SHAREPOINT-1.3
Ensure specific whitelisted IP addresses, IP address ranges, and/or domains are set
説明
Access to the SharePoint web application should be restricted to a certain group of users. Typically, this is done through restricting IP addresses to selectively allow known and approved user populations. Manual review.
チェック方法
監査方法: 手動レビュー
この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。
In IIS Manager select the 'SharePoint Central Administration v4' site > IP Address and Domain Restrictions. Verify allow entries list only approved administrative IP addresses, ranges and/or domains, and that unlisted clients are denied.
修正方法
修正方法: ガイダンスまたは IaC パッチ
IIS Manager > SharePoint Central Administration v4 > IP Address and Domain Restrictions > Add Allow Entry for each approved admin address/range; set the default for unspecified clients to Deny.
プロパティ
- オペレーティングシステム
- すべて
- タグ
- sharepointnetworkcentral-admin
- 参照
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 1.3 Ensure specific whitelisted IP addresses, IP address ranges, and/or domains are set