STIGQter: STIG Summary: Web Server Security Requirements Guide Version: 2 Release: 3 Benchmark Date: 26 Apr 2019:

The web server must not be a proxy server.

DISA Rule

SV-54271r3_rule

Vulnerability Number

V-41694

Group Title

SRG-APP-000141-WSR-000076

Rule Version

SRG-APP-000141-WSR-000076

Severity

CAT II

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

Uninstall any proxy services, modules, and libraries that are used by the web server to act as a proxy server.

Verify all configuration changes are made to assure the web server is no longer acting as a proxy server in any manner.

Check Contents

Review the web server documentation and deployed configuration to determine if the web server is also a proxy server.

If the web server is also acting as a proxy server, this is a finding.

Vulnerability Number

V-41694

Documentable

False

Rule Version

SRG-APP-000141-WSR-000076

Severity Override Guidance

Review the web server documentation and deployed configuration to determine if the web server is also a proxy server.

If the web server is also acting as a proxy server, this is a finding.

Check Content Reference

M

Target Key

2557

Comments