STIGQter STIGQter: STIG Summary: Microsoft IIS 8.5 Site Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

The application pool for each IIS 8.5 website must have a recycle time explicitly set.

DISA Rule

SV-214488r508659_rule

Vulnerability Number

V-214488

Group Title

SRG-APP-000516-WSR-000174

Rule Version

IISW-SI-000255

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Open the IIS 8.5 Manager.

Click the “Application Pools”.

Perform for each Application Pool.

Highlight an Application Pool and click "Advanced Settings" in the “Action” Pane.

Scroll down to the "Recycling" section and expand the "Generate Recycle Event Log Entry" section.

Set both the "Regular time interval" and "Specific time" options to "True".

Check Contents

Note: Recycling Application Pools can create an unstable environment in a 64-bit SharePoint environment. If operational issues arise, with supporting documentation from the ISSO this check can be downgraded to a Cat III.

Open the IIS 8.5 Manager.

Perform for each Application Pool.

Click the “Application Pools”.

Highlight an Application Pool and click "Advanced Settings" in the “Action” Pane.

Scroll down to the "Recycling" section and expand the "Generate Recycle Event Log Entry" section.

Verify both the "Regular time interval" and "Specific time" options are set to "True".

If both the "Regular time interval" and "Specific time" options are not set to "True", this is a finding.

Vulnerability Number

V-214488

Documentable

False

Rule Version

IISW-SI-000255

Severity Override Guidance

Note: Recycling Application Pools can create an unstable environment in a 64-bit SharePoint environment. If operational issues arise, with supporting documentation from the ISSO this check can be downgraded to a Cat III.

Open the IIS 8.5 Manager.

Perform for each Application Pool.

Click the “Application Pools”.

Highlight an Application Pool and click "Advanced Settings" in the “Action” Pane.

Scroll down to the "Recycling" section and expand the "Generate Recycle Event Log Entry" section.

Verify both the "Regular time interval" and "Specific time" options are set to "True".

If both the "Regular time interval" and "Specific time" options are not set to "True", this is a finding.

Check Content Reference

M

Target Key

4001

Comments