Detections
Analytics
IIST-SV-000151 - The IIS 10.0 web server must be tuned to handle the operational requirements of the hosted application.
Information
A Denial of Service (DoS) can occur when the web server is overwhelmed and can no longer respond to additional requests. A web server not properly tuned may become overwhelmed and cause a DoS condition even with expected traffic from users. To avoid a DoS, the web server must be tuned to handle the expected traffic for the hosted applications.Solution
Access the IIS 10.0 web server registry.Verify the following keys are present and configured. The required setting depends upon the requirements of the application. These settings must be explicitly configured to show a conscientious tuning has been made.
Navigate to HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\
Configure the following registry keys to levels to accommodate the hosted applications.
Create REG_DWORD 'URIEnableCache'
Create REG_DWORD 'UriMaxUriBytes'
Create REG_DWORD 'UriScavengerPeriod'
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_IIS_10-0_Y26M07_STIG.zip
Item Details
Audit Name: DISA Microsoft IIS 10.0 Server STIG v3r7
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-5, CAT|II, CCI|CCI-002385, Rule-ID|SV-218819r1022659_rule, STIG-ID|IIST-SV-000151, STIG-Legacy|SV-109277, STIG-Legacy|V-100173, Vuln-ID|V-218819
Plugin: Windows
Control ID: 7a770bfc8615b271a1ea77bd3563e2243a89618e652ebea6b54e49d010b89d2a