Detections
Analytics

5.10 Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'

Information

Enables the server to be a File Transfer Protocol (FTP) server.

The recommended state for this setting is: Disabled or Not Installed.

Note: This service is not installed by default. It is supplied with Windows, but is installed by enabling an optional Windows feature ( Internet Information Services - FTP Server ).

Hosting an FTP server (especially a non-secure FTP server) from a workstation is an increased security risk, as the attack surface of that workstation is then greatly increased.

Note: This security concern applies to any FTP server application installed on a workstation, not just IIS.

Solution

To establish the recommended configuration, run the following PowerShell command or ensure the service is not installed.

Set-Service -Name FTPSVC -StartupType Disabled

Impact:

The computer will not function as an FTP server.

See Also

https://workbench.cisecurity.org/benchmarks/26061

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 470a56b5093e8e305ad438d68a150c67fab5b334b78b0ab57c326ed1017b5854