Detections
Analytics
AS24-W2-000830 - The Apache web server must be tuned to handle the operational requirements of the hosted application.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
A denial of service (DoS) can occur when the web server is so overwhelmed that it can no longer respond to additional requests. A web server not properly tuned may become overwhelmed and cause a DoS condition even with expected traffic from users. To avoid a DoS, the web server must be tuned to handle the expected traffic for the hosted applications.Satisfies: SRG-APP-000435-WSR-000148, SRG-APP-000246-WSR-000149
Solution
Add or modify the 'Timeout' directive in the Apache configuration to have a value of '60' seconds or less.'Timeout 60'
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apache_Server_2-4_Windows_Y25M04_STIG.zip
Item Details
Audit Name: DISA Apache Server 2.4 Windows Site STIG v2r2
References: CAT|II, CCI|CCI-001094, CCI|CCI-002385, Rule-ID|SV-214392r1067798_rule, STIG-ID|AS24-W2-000830, STIG-Legacy|SV-102667, STIG-Legacy|V-92579, Vuln-ID|V-214392
Plugin: Windows
Control ID: b0980a52e84dca4e9a101cfb4c7548884d28c789d6b7117835cb794fc54d6c56