Detections
Analytics

SHPT-00-000480 - When configuring Central Administration, the port number selected must comply with DoD Ports and Protocol Management (PPSM) program requirements.

Information

During the installation of Microsoft SharePoint, the Central Administration Web site is established on a randomly-assigned TCP port by default. Allowing a randomly-assigned default may result in use of a port which violates DoD policy or conflicts with ports already in use. Use of certain well-known ports may also result in slow operational responses or may expose the application to denial of service attacks.

Solution

1. Open the SharePoint 2010 Management Shell (Start > All Programs > Microsoft SharePoint 2010 Products > SharePoint 2010 Management Shell).
2. Change the port number to a PPSM approved port which does not conflict with existing port usage by using the following command:
-Set -SPCentralAdministration -Port <PortNumber>.
3. Press Enter to save.

See Also

https://iasecontent.disa.mil/stigs/zip/U_MS_SharePoint_2010_V1R9_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CAT|II, CCI|CCI-000382, Rule-ID|SV-37769r2_rule, STIG-ID|SHPT-00-000480, Vuln-ID|V-28170

Plugin: Windows

Control ID: d92406aea0d43974925d4d1a8f08ff1b72b6f6015c555da3fb2c108115ab730a