The application pool must have a recycle time set.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-13704	WA000-WI6020 IIS7	SV-46344r3_rule	ECSC-1	Medium

Description
Application pools can be periodically recycled to avoid unstable states possibly leading to application crashes, hangs, or memory leaks.

STIG	Date
IIS 7.0 WEB SITE STIG	2015-08-27

Details

Check Text ( C-32828r9_chk )
Note: Recycling Application Pools can create an unstable environment in a 64-bit Sharepoint environment. If operational issues arise, with supporting documentation from the ISSO this check can be downgraded to a Cat III. 1. Open the IIS Manager. 2. Click the Application Pools. 3. Highlight the desired application pool and click Recycling... in the Action Pane. 4. Review the Fixed Intervals section. If both Regular time intervals and Specific time(s) are unchecked, this is a finding. If only Regular Time Intervals is checked and the value is set to 0, this is a finding.

Check Text ( C-32828r9_chk )

Note: Recycling Application Pools can create an unstable environment in a 64-bit Sharepoint environment. If operational issues arise, with supporting documentation from the ISSO this check can be downgraded to a Cat III.

1. Open the IIS Manager.
2. Click the Application Pools.
3. Highlight the desired application pool and click Recycling... in the Action Pane.
4. Review the Fixed Intervals section. If both Regular time intervals and Specific time(s) are unchecked, this is a finding. If only Regular Time Intervals is checked and the value is set to 0, this is a finding.

Fix Text (F-28939r3_fix)
1. Open the IIS Manager. 2. Click the Application Pools. 3. Highlight an application pool and click Recycling... in the Action Pane. 4. Choose a fixed interval type of fixed time and/or specific time. If regular time interval is the only type chosen, then the value entered must be greater than 0.