WA000-WI6010 IIS6 - The web site must have a unique application pool.

Information

Application pools isolate sites and applications to address reliability, availability, and security issues. Sites and applications may be grouped according to configurations, although each site will be associated with a unique application pool.

NOTE: Review each Web Applications to ensure each utilizes a separate Application Pool.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

1. Open the IIS Manager > Right click on the website being reviewed > Select the Home Directory tab.
2. Go to the Application settings area > Select the Application pool drop down > Select the unique Application pool for the web site.
3. Press OK.

See Also

http://iasecontent.disa.mil/stigs/zip/July2015/U_IIS_6-0_V6R16_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-39, CAT|II, Rule-ID|SV-38137r1_rule, STIG-ID|WA000-WI6010_IIS6, Vuln-ID|V-13703

Plugin: Windows

Control ID: f75e4442995d48f7b0bc37adec542e359129eb988cbf5bcfc5d52e97d0e315da