STIGQter: STIG Summary: ArcGIS for Server 10.3 Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 26 Jan 2018:

The ArcGIS Server must maintain a separate execution domain for each executing process.

DISA Rule

SV-80011r1_rule

Vulnerability Number

V-65521

Group Title

SRG-APP-000431

Rule Version

AGIS-00-000197

Severity

CAT II

CCI(s)

• CCI-002530 - The information system maintains a separate execution domain for each executing process.

Weight

10

Fix Recommendation

Configure the ArcGIS Server to ensure all published services maintain a separate execution domain for each process. Substitute the target environment’s values for [bracketed] variables.

In PowerShell, run the following command, replacing the [bracketed] values with the path of the ArcGIS Server Site "config-store":

Get-ChildItem -recurse [C:\arcgisserver\]config-store\services\*.json | Select-String -pattern "`"isolationLevel`": `"LOW`""

Stop ArcGIS Server, then replace the "LOW" with "HIGH" in all found files.

Check Contents

Review the ArcGIS Server configuration to ensure all published services maintain a separate execution domain for each process. Substitute the target environment’s values for [bracketed] variables.

In PowerShell, run the following command, replacing the [bracketed] values with the path of the ArcGIS Server Site "config-store":

Get-ChildItem -recurse [C:\arcgisserver\]config-store\services\*.json | Select-String -pattern "`"isolationLevel`": `"LOW`""

If any values are returned, this is a finding.

Vulnerability Number

V-65521

Documentable

False

Rule Version

AGIS-00-000197

Severity Override Guidance

Review the ArcGIS Server configuration to ensure all published services maintain a separate execution domain for each process. Substitute the target environment’s values for [bracketed] variables.

In PowerShell, run the following command, replacing the [bracketed] values with the path of the ArcGIS Server Site "config-store":

Get-ChildItem -recurse [C:\arcgisserver\]config-store\services\*.json | Select-String -pattern "`"isolationLevel`": `"LOW`""

If any values are returned, this is a finding.

Check Content Reference

M

Target Key

2961

Comments