Ensure all web applications use HTTPS

高レベル 1自動sharepoint

説明

Web applications served over HTTP expose credentials and authentication cookies. Prints the number of web applications whose URL is not HTTPS (expected 0). Run on a SharePoint farm server as a farm administrator; the audit loads the Microsoft.SharePoint.PowerShell snap-in and fails if it cannot.

チェック方法

監査方法: シェルコマンド

shell

$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction Stop }; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { throw 'SharePoint cmdlets are not available' }; $bad = @(Get-SPWebApplication -ErrorAction Stop | Where-Object { $_.Url -notlike 'https://*' }); $bad.Count

期待される出力: 0

修正方法

修正方法: ガイダンスまたは IaC パッチ

Extend or reconfigure each web application with an HTTPS binding and alternate access mapping (New-SPAlternateURL / Set-SPAlternateURL), bind a trusted certificate in IIS, then remove the HTTP zone.

プロパティ

オペレーティングシステム: すべて
タグ: sharepointtransport
参照: CIS Microsoft SharePoint Server Benchmark - Web applications / SSL (verify section number for your release)

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target sharepoint