Home
Security Hardening
DISA STIG Apache Site 2.2 Windows V1R13

DISA STIG Apache Site 2.2 Windows V1R13

WG205 W22 – The web document (home) directory must be in a separate partition from the web server’s system files. – ‘DocumentRoot’
Details Application partitioning enables an additional security measure by securing user traffic under one security context, while managing system and...
WG205 W22 – The web document (home) directory must be in a separate partition from the web server’s system files. – ‘ErrorLog’
Details Application partitioning enables an additional security measure by securing user traffic under one security context, while managing system and...
WG210 W22 – Web content directories must not be anonymously shared.
Details Sharing of web server content is a security risk when a web server is involved. Users accessing the share...
WG230 W22 – Web server administration must be performed over a secure path or at the local console.
Details Logging into a web server remotely using an unencrypted protocol or service when performing updates and maintenance is a...
WG240 W22 – Logs of web server access and errors must be established and maintained.
Details A major tool in exploring the web site use, attempted use, unusual conditions, and problems are reported in the...
WG242 W22 – Log file data must contain required data elements.
Details The use of log files is a critical component of the operation of the Information Systems (IS) used within...
WG250 W22 – Log file access must be restricted to System Administrators, Web Administrators or Auditors.
Details A major tool in exploring the web site use, attempted use, unusual conditions and problems are the access and...
WG255 W22 – Access to the web server log files must be restricted to Administrators, the user assigned to run the web server software, Web Manager, and Auditors.
Details A major tool in exploring the web site use, attempted use, unusual conditions and problems are the access and...
WG235 W22 – Web Administrators must only use encrypted connections for Document Root directory uploads.
Details Logging in to a web server via an unencrypted protocol or service, to upload documents to the web site,...
WG260 W22 – Only web sites that have been fully reviewed and tested must exist on a production web server.
Details In the case of a production web server, areas for content development and testing will not exist, as this...

Prev Next

DISA STIG Apache Site 2.2 Windows V1R13

WG205 W22 – The web document (home) directory must be in a separate partition from the web server’s system files. – ‘DocumentRoot’

WG205 W22 – The web document (home) directory must be in a separate partition from the web server’s system files. – ‘ErrorLog’

WG210 W22 – Web content directories must not be anonymously shared.

WG230 W22 – Web server administration must be performed over a secure path or at the local console.

WG240 W22 – Logs of web server access and errors must be established and maintained.

WG242 W22 – Log file data must contain required data elements.

WG250 W22 – Log file access must be restricted to System Administrators, Web Administrators or Auditors.

WG255 W22 – Access to the web server log files must be restricted to Administrators, the user assigned to run the web server software, Web Manager, and Auditors.

WG235 W22 – Web Administrators must only use encrypted connections for Document Root directory uploads.

WG260 W22 – Only web sites that have been fully reviewed and tested must exist on a production web server.