IISW-SV-000151 - The IIS 8.5 web server must be tuned to handle the operational requirements of the hosted application.

Information

A Denial of Service (DoS) can occur when the web server is so overwhelmed that it can no longer respond to additional requests. A web server not properly tuned may become overwhelmed and cause a DoS condition even with expected traffic from users. To avoid a DoS, the web server must be tuned to handle the expected traffic for the hosted applications.

Solution

Access the IIS 8.5 web server registry.

Verify the following values are present and configured. The required setting depends upon the requirements of the application. These settings have to be explicitly configured to show a conscientious tuning has been made.

Navigate to HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\

Configure the following registry keys to levels to accommodate the hosted applications.

'URIEnableCache'
'UriMaxUriBytes'
'UriScavengerPeriod'

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_IIS_8-5_Y23M10_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-5, CAT|II, CCI|CCI-002385, Rule-ID|SV-214434r879806_rule, STIG-ID|IISW-SV-000151, STIG-Legacy|SV-91451, STIG-Legacy|V-76755, Vuln-ID|V-214434

Plugin: Windows

Control ID: 58e51309b01a5e9fe4475ff241c50fc7141abfc0780db332ade009bf0908c9d3