APACHE 2.2 Site for Windows STIG

APACHE 2.2 Site for Windows Security Technical Implementation Guide

ID	Vuln ID	Title	Cat
WA00605 W22	V-26279	Error logging must be enabled.	Cat II
WA00612 W22	V-26280	The sites error logs must log the correct format.	Cat II
WA00615 W22	V-26281	System logging must be enabled.	Cat II
WA00620 W22	V-26282	The LogLevel directive must be enabled.	Cat II
WG110 W22	V-2240	The number of allowed simultaneous requests must be set.	Cat II
WG140 W22	V-6531	Private web servers must require certificates issued from a DoD-authorized Certificate Authority.	Cat II
WG170 W22	V-2245	Each readable web document directory must contain either a default, home, index, or equivalent file.	Cat III
WG205 W22	V-3333	The web document (home) directory must be in a separate partition from the web server’s system files.	Cat II
WG210 W22	V-2226	Web content directories must not be anonymously shared.	Cat II
WG230 W22	V-2249	Web server administration must be performed over a secure path or at the local console.	Cat I
WG235 W22	V-13686	Web Administrators must only use encrypted connections for Document Root directory uploads.	Cat I
WG240 W22	V-2250	Logs of web server access and errors must be established and maintained.	Cat II
WG242 W22	V-13688	Log file data must contain required data elements.	Cat II
WG250 W22	V-2252	Log file access must be restricted to System Administrators, Web Administrators or Auditors.	Cat II
WG255 W22	V-13689	Access to the web server log files must be restricted to Administrators, the user assigned to run the web server software, Web Manager, and Auditors.	Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.