The maximum queue length for HTTP.sys must be managed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-13709	WA000-WI6030 IIS7	SV-32573r3_rule		Medium

Description
In order to determine the possible causes of client connection errors and to conserve system resources, it is important to both log errors and manage those settings controlling requests to the application pool.

STIG	Date
IIS 7.0 WEB SITE STIG	2017-01-04

Details

Check Text ( C-32858r2_chk )
1. Open the IIS Manager. 2. Click the Application Pools. 3. Highlight an Application Pool to review and click Advanced Settings in the Actions Pane. 4. Scroll down to the General section and ensure the value for Queue Length is set to 1000. If not, this is a finding. NOTE: If the site has operational reasons to set Queue Length to an alternate value, and has supporting documentation signed by the ISSO, this is not a finding.

Check Text ( C-32858r2_chk )

1. Open the IIS Manager.
2. Click the Application Pools.
3. Highlight an Application Pool to review and click Advanced Settings in the Actions Pane.
4. Scroll down to the General section and ensure the value for Queue Length is set to 1000. If not, this is a finding.

NOTE: If the site has operational reasons to set Queue Length to an alternate value, and has supporting documentation signed by the ISSO, this is not a finding.

Fix Text (F-28993r1_fix)
1. Open the IIS Manager. 2. Click the Application Pools. 3. Highlight an Application Pool to review and click Advanced Settings in the Actions Pane. 4. Scroll down to the General section and set the value for Queue Length to 1000.