Ensure that the SharePoint Central Administration interface is not hosted in the DMZ.

YüksekDüzey 1Manuel incelemesharepoint

Açıklama

The SharePoint Central Administration site should not be installed onto the network DMZ, which is exposed to external internet connections. Manual review.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Note the Central Administration URL (e.g. http://server:port) on an admin workstation, then try to open it from a workstation or server in the DMZ. Finding if it is reachable from the DMZ or if a server hosting Central Administration is in the DMZ.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Remove Central Administration from DMZ servers: run the SharePoint Products Configuration Wizard, choose Do not disconnect from the server farm, then Yes, I want to remove the website from this machine.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: sharepointnetworkcentral-admin
Referans: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.11 Ensure that the SharePoint Central Administration interface is not hosted in the DMZ.