Ensure that SharePoint application servers are protected by a reverse proxy

СреднийУровень 1Ручная проверкаsharepoint

Описание

A reverse proxy is server component that sits between the internet and the web servers. It accepts HTTPS requests, provides various services, and forwards the requests to one or many servers. Manual review.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Review the SharePoint architecture and network diagrams and verify all HTTPS requests from users reach the SharePoint servers only through a reverse proxy (no direct client access to the web front ends).

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Deploy a reverse proxy that terminates/inspects all HTTPS requests and routes them to the SharePoint servers; block direct client access to the servers.

Свойства

Операционные системы: Любая
Теги: sharepointnetwork
Источник: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.9 Ensure that SharePoint application servers are protected by a reverse proxy