Details

Information flow control regulates where information is allowed to travel within an information system and between information systems (as opposed to who is allowed to access the information) and without explicit regard to subsequent accesses to the information.

SharePoint installed Central Administrator is a powerful management tool used to administer the farm. This server should be installed on a trusted network segment. This server should also be used to run services rather than user-oriented web applications.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

For environments requiring an Internet-facing capability, remove the SharePoint Central Administration application server upon which Central Administration is installed from the DMZ.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_SharePoint_2013_V2R2_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.

References

• 800-53|AC-4
• CAT|II
• CCI|CCI-001414
• Rule-ID|SV-223266r612235_rule
• STIG-ID|SP13-00-000155
• STIG-Legacy|SV-74425
• STIG-Legacy|V-59995
• Vuln-ID|V-223266

Source

• Tenable.com/audits