Detections
Analytics
WA155 IIS6 - Classified web servers must be afforded physical security commensurate with the classification of its content.
Information
When data of a classified nature is migrated to a web server, fundamental principles applicable to the safeguarding of classified material must be followed. A classified web server needs to be afforded physical security commensurate with the classification of its content to ensure the protection of the data it houses.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Relocate the web server to a location appropriate to classified devices.See Also
http://iasecontent.disa.mil/stigs/zip/July2015/U_IIS_6-0_V6R16_STIG.zip
Item Details
Audit Name: DISA STIG IIS 6.0 Server v6r16
References: CAT|I, Rule-ID|SV-38173r2_rule, STIG-ID|WA155_IIS6, Vuln-ID|V-13591
Plugin: Windows
Control ID: fbb8da6b37b3df470c9bd3305582b00288afaa72dad907d4903fafb05a63488d