Skip to content

Apache Server 2.4 Windows Server Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000141-WSR-000085

    Group
  • The Apache web server must have Web Distributed Authoring (WebDAV) disabled.

    A web server can be installed with functionality that, just by its nature, is not secure. WebDAV is an extension to the HTTP protocol that, when developed, was meant to allow users to create, chang...
    Rule Medium Severity
  • SRG-APP-000142-WSR-000089

    Group
  • SRG-APP-000172-WSR-000104

    Group
  • SRG-APP-000175-WSR-000095

    Group
  • The Apache web server must perform RFC 5280-compliant certification path validation.

    A certificate's certification path is the path from the end entity certificate to a trusted root certification authority (CA). Certification path validation is necessary for a relying party to make...
    Rule Medium Severity
  • SRG-APP-000211-WSR-000030

    Group
  • SRG-APP-000211-WSR-000129

    Group
  • The Apache web server must separate the hosted applications from hosted Apache web server management functionality.

    The separation of user functionality from web server management can be accomplished by moving management functions to a separate IP address or port. To further separate the management functions, se...
    Rule Medium Severity
  • SRG-APP-000220-WSR-000201

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules