Ensure all web applications use HTTPS

YüksekDüzey 1Otomatiksharepoint

Açıklama

Web applications served over HTTP expose credentials and authentication cookies. Prints the number of web applications whose URL is not HTTPS (expected 0). Run on a SharePoint farm server as a farm administrator; the audit loads the Microsoft.SharePoint.PowerShell snap-in and fails if it cannot.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell

$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction Stop }; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { throw 'SharePoint cmdlets are not available' }; $bad = @(Get-SPWebApplication -ErrorAction Stop | Where-Object { $_.Url -notlike 'https://*' }); $bad.Count

Beklenen çıktı: 0

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Extend or reconfigure each web application with an HTTPS binding and alternate access mapping (New-SPAlternateURL / Set-SPAlternateURL), bind a trusted certificate in IIS, then remove the HTTP zone.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: sharepointtransport
Referans: CIS Microsoft SharePoint Server Benchmark - Web applications / SSL (verify section number for your release)

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target sharepoint