Home
Security Hardening
DISA STIG Apache Server 2.4 Windows Server V2R2

DISA STIG Apache Server 2.4 Windows Server V2R2

AS24-W1-000250 – The Apache web server must only contain services and functions necessary for operation – httpd-manual package
Details A web server can provide many features, services, and processes. Some of these may be deemed unnecessary or too...
AS24-W1-000010 – The Apache web server must limit the number of allowed simultaneous session requests.
Details Apache web server management includes the ability to control the number of users and user sessions that utilize an...
AS24-W1-000250 – The Apache web server must only contain services and functions necessary for operation – SetHandler other
Details A web server can provide many features, services, and processes. Some of these may be deemed unnecessary or too...
AS24-W1-000020 – The Apache web server must perform server-side session management – session_module
Details Session management is the practice of protecting the bulk of the user authorization and identity information. Storing of this...
AS24-W1-000250 – The Apache web server must only contain services and functions necessary for operation – SetHandler server-info
Details A web server can provide many features, services, and processes. Some of these may be deemed unnecessary or too...
AS24-W1-000020 – The Apache web server must perform server-side session management – usertrack_module
Details Session management is the practice of protecting the bulk of the user authorization and identity information. Storing of this...
AS24-W1-000250 – The Apache web server must only contain services and functions necessary for operation – SetHandler server-status
Details A web server can provide many features, services, and processes. Some of these may be deemed unnecessary or too...
AS24-W1-000030 – The Apache web server must use encryption strength in accordance with the categorization of data hosted by the Apache web server when remote connections are provided – ssl_module
Details The Apache web server has several remote communications channels. Examples are user requests via http/https, communication to a backend...
AS24-W1-000030 – The Apache web server must use encryption strength in accordance with the categorization of data hosted by the Apache web server when remote connections are provided – SSLProtocol
Details The Apache web server has several remote communications channels. Examples are user requests via http/https, communication to a backend...
AS24-W1-000065 – System logging must be enabled.
Details The server error logs are invaluable because they can also be used to identify potential problems and enable proactive...

DISA STIG Apache Server 2.4 Windows Server V2R2

AS24-W1-000250 – The Apache web server must only contain services and functions necessary for operation – httpd-manual package

AS24-W1-000010 – The Apache web server must limit the number of allowed simultaneous session requests.

AS24-W1-000250 – The Apache web server must only contain services and functions necessary for operation – SetHandler other

AS24-W1-000020 – The Apache web server must perform server-side session management – session_module

AS24-W1-000250 – The Apache web server must only contain services and functions necessary for operation – SetHandler server-info

AS24-W1-000020 – The Apache web server must perform server-side session management – usertrack_module

AS24-W1-000250 – The Apache web server must only contain services and functions necessary for operation – SetHandler server-status

AS24-W1-000030 – The Apache web server must use encryption strength in accordance with the categorization of data hosted by the Apache web server when remote connections are provided – ssl_module

AS24-W1-000030 – The Apache web server must use encryption strength in accordance with the categorization of data hosted by the Apache web server when remote connections are provided – SSLProtocol

AS24-W1-000065 – System logging must be enabled.