Details

During the installation of Microsoft SharePoint, the Central Administration Web site is established on a randomly-assigned TCP port by default. Allowing a randomly-assigned default may result in use of a port which violates DoD policy or conflicts with ports already in use. Use of certain well-known ports may also result in slow operational response or expose the application to known denial of service attacks.

Solution

Configure the SharePoint Central Administration port number selected to comply with DoD Ports and Protocol Management (PPSM) program requirements.

Open the SharePoint Management Shell (Start >> All Programs >> Microsoft SharePoint Products >> SharePoint Management Shell).

Change the port number to a PPS-approved port that does not conflict with existing port usage using the following command:
Set -SPCentralAdministration -Port

Press ‘Enter’ to save.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_SharePoint_2013_V2R2_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-7b.
• CAT|II
• CCI|CCI-000382
• Rule-ID|SV-223273r612235_rule
• STIG-ID|SP13-00-000190
• STIG-Legacy|SV-74439
• STIG-Legacy|V-60009
• Vuln-ID|V-223273

Source

• Tenable.com/audits