Detections
Analytics
WA000-WI6034 IIS6 - The Enable rapid-fail protection monitor must be enabled.
Information
A worker process handles all application execution, including authentication and authorization, as well as, ISAPI filter and extension loading. This executable process is called W3WP.exe. When acting as the worker process manager, the www service is responsible for controlling the lifetime of all worker processes that are processing requests. The management console allows it to configure options, such as when to start or recycle a worker process, how many requests to serve before recycling, and what to do if the worker becomes blocked or unable to continue processing requests.Solution
1. Open the IIS Manager > Right click on the desired Application Pool > Select Properties > Select the Health tab.2. Ensure the Enable rapid-fail protection monitor is enabled and the value is set to 5 or less.
See Also
http://iasecontent.disa.mil/stigs/zip/July2015/U_IIS_6-0_V6R16_STIG.zip
Item Details
Audit Name: DISA STIG IIS 6.0 Site Checklist v6r16
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, Rule-ID|SV-38044r2_rule, STIG-ID|WA000-WI6034_IIS6, Vuln-ID|V-13711
Plugin: Windows
Control ID: fefb939585514c0bd971560ed819dcc2d2d53b5022575b361d8d5a7b6dd87a2c