WG040 W22 - Public web server resources must not be shared with private assets.


It is important to segregate public web server resources from private resources located behind the DoD DMZ in order to protect private assets. When folders, drives or other resources are directly shared between the public web server and private servers the intent of data and resource segregation can be compromised.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.


Configure the public web server to not have a trusted relationship with any system resource that is not accessible to the public. Web content is not to be shared via Microsoft shares or NFS mounts.

See Also


Item Details

References: CAT|II, Rule-ID|SV-33044r2_rule, STIG-ID|WG040_W22, Vuln-ID|V-2234

Plugin: Windows

Control ID: 7266381c267180f168e3839856d0d046525e66fe10fcc24facff9b2184e715c2