SharePoint-specific malware (i.e. anti-virus) protection software must be integrated and configured.
An XCCDF Rule
Description
<VulnDiscussion>Configuring anti-virus settings ensures documents will be scanned for viruses upon download from and upload to the SharePoint server. Anti-virus settings are not configured by default, therefore leaving the documents downloaded from or uploaded to SharePoint open to potential viruses.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-223274r612235_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Configure and integrate SharePoint-specific malware (i.e. anti-virus) protection software on the SharePoint server.
Install and configure anti-virus package.
Install a SharePoint Server 2010-specific antivirus package.