The application pool for each IIS 10.0 website must have a recycle time explicitly set.

An XCCDF Rule

Description

<VulnDiscussion>Application pools can be periodically recycled to avoid unstable states possibly leading to application crashes, hangs, or memory leaks.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-218775r879887_rule
Severity: Medium
References: CCI-000366
Updated: 8 months ago

Open the IIS 10.0 Manager.

Click the "Application Pools".

Perform the following for each Application Pool:
Highlight an Application Pool and click "Recycling" in the "Actions" pane.

In the Recycling Conditions window, select at least one means to recycle the Application Pool (e.g., Regular Time Intervals, Scheduled Time).

Click "Next".

In the Recycling Events to Log window, select at minimum both the events that match the conditions from the previous step (e.g., Regular Time Intervals, Scheduled Time).

Click "Finish".

The application pool for each IIS 10.0 website must have a recycle time explicitly set.

Description

Remediation - Manual Procedure