Check: WA070 A22
APACHE Server 2.0 for Unix:
WA070 A22
(in version v1 r5)
Title
A private web server must be located on a separate controlled access subnet. (Cat II impact)
Discussion
Private web servers, which host sites that serve controlled access data, must be protected from outside threats in addition to insider threats. Insider threat may be accidental or intentional but, in either case, can cause a disruption in service of the web server. To protect the private web server from these threats, it must be located on a separate controlled access subnet and must not be a part of the public DMZ that houses the public web servers. It also cannot be located inside the enclave as part of the local general population LAN.
Check Content
Verify the site’s network diagram and visually check the web server, to ensure that the private web server is located on a separate controlled access subnet and is not a part of the public DMZ that houses the public web servers. In addition, the private web server needs to be isolated via a controlled access mechanism from the local general population LAN.
Fix Text
Isolate the private web server from the public DMZ and separate it from the internal general population LAN.
Additional Identifiers
Rule ID: SV-32935r1_rule
Vulnerability ID: V-2243
Group Title: WA070
Expert Comments
CCIs
Number | Definition |
---|---|
No CCIs are assigned to this check |
Controls
Number | Title |
---|---|
No controls are assigned to this check |