Ensure that the SharePoint Central Administration interface is not hosted in the DMZ.

高レベル 1手動レビューsharepoint

説明

The SharePoint Central Administration site should not be installed onto the network DMZ, which is exposed to external internet connections. Manual review.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Note the Central Administration URL (e.g. http://server:port) on an admin workstation, then try to open it from a workstation or server in the DMZ. Finding if it is reachable from the DMZ or if a server hosting Central Administration is in the DMZ.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Remove Central Administration from DMZ servers: run the SharePoint Products Configuration Wizard, choose Do not disconnect from the server farm, then Yes, I want to remove the website from this machine.

プロパティ

オペレーティングシステム: すべて
タグ: sharepointnetworkcentral-admin
参照: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.11 Ensure that the SharePoint Central Administration interface is not hosted in the DMZ.