Ensure that the SharePoint Central Administration interface is not hosted in the DMZ.

높음레벨 1수동 검토sharepoint

설명

The SharePoint Central Administration site should not be installed onto the network DMZ, which is exposed to external internet connections. Manual review.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Note the Central Administration URL (e.g. http://server:port) on an admin workstation, then try to open it from a workstation or server in the DMZ. Finding if it is reachable from the DMZ or if a server hosting Central Administration is in the DMZ.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Remove Central Administration from DMZ servers: run the SharePoint Products Configuration Wizard, choose Do not disconnect from the server farm, then Yes, I want to remove the website from this machine.

속성

운영 체제: 모두
태그: sharepointnetworkcentral-admin
참고 자료: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.11 Ensure that the SharePoint Central Administration interface is not hosted in the DMZ.