STIGQter: STIG Summary: Microsoft IIS 8.5 Server Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

The Internet Printing Protocol (IPP) must be disabled on the IIS 8.5 web server.

DISA Rule

SV-214433r508658_rule

Vulnerability Number

V-214433

Group Title

SRG-APP-000383-WSR-000175

Rule Version

IISW-SV-000149

Severity

CAT II

CCI(s)

• CCI-001762 - The organization disables organization-defined functions, ports, protocols, and services within the information system deemed to be unnecessary and/or nonsecure.

Weight

10

Fix Recommendation

Click “Start”, then click “Administrative Tools”, and then click “Server Manager”.

Expand the roles node, then right-click “Print Services”, and then select “Remove Roles Services”.

If the Internet Printing option is checked, clear the check box, click “Next”, and then click “Remove” to complete the wizard.

Check Contents

If the Print Services role and the Internet Printing role are not installed, this check is Not Applicable.

Navigate to the following directory:

%windir%\web\printers

If this folder exists, this is a finding.

Determine whether Internet Printing is enabled:

Click “Start”, then click “Administrative Tools”, and then click “Server Manager”.

Expand the roles node, then right-click “Print Services”, and then select “Remove Roles Services”.

If the Internet Printing option is enabled, this is a finding.

Vulnerability Number

V-214433

Documentable

False

Rule Version

IISW-SV-000149

Severity Override Guidance

If the Print Services role and the Internet Printing role are not installed, this check is Not Applicable.

Navigate to the following directory:

%windir%\web\printers

If this folder exists, this is a finding.

Determine whether Internet Printing is enabled:

Click “Start”, then click “Administrative Tools”, and then click “Server Manager”.

Expand the roles node, then right-click “Print Services”, and then select “Remove Roles Services”.

If the Internet Printing option is enabled, this is a finding.

Check Content Reference

M

Target Key

4000

Comments