Microsoft SharePoint Server
TMA-SHAREPOINT-3.9
Ensure that SharePoint application servers are protected by a reverse proxy
中レベル 1手動レビューsharepoint
説明
A reverse proxy is server component that sits between the internet and the web servers. It accepts HTTPS requests, provides various services, and forwards the requests to one or many servers. Manual review.
チェック方法
監査方法: 手動レビュー
この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。
Review the SharePoint architecture and network diagrams and verify all HTTPS requests from users reach the SharePoint servers only through a reverse proxy (no direct client access to the web front ends).
修正方法
修正方法: ガイダンスまたは IaC パッチ
Deploy a reverse proxy that terminates/inspects all HTTPS requests and routes them to the SharePoint servers; block direct client access to the servers.
プロパティ
- オペレーティングシステム
- すべて
- タグ
- sharepointnetwork
- 参照
- CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.9 Ensure that SharePoint application servers are protected by a reverse proxy