The application pool for each IIS 8.5 website must have a recycle time explicitly set.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-76873	IISW-SI-000255	SV-91569r1_rule		Medium

Description
Application pools can be periodically recycled to avoid unstable states possibly leading to application crashes, hangs, or memory leaks.

STIG	Date
IIS 8.5 Site Security Technical Implementation Guide	2018-04-06

Details

Check Text ( C-76529r1_chk )
Note: Recycling Application Pools can create an unstable environment in a 64-bit SharePoint environment. If operational issues arise, with supporting documentation from the ISSO this check can be downgraded to a Cat III. Open the IIS 8.5 Manager. Perform for each Application Pool. Click the “Application Pools”. Highlight an Application Pool and click "Advanced Settings" in the “Action” Pane. Scroll down to the "Recycling" section and expand the "Generate Recycle Event Log Entry" section. Verify both the "Regular time interval" and "Specific time" options are set to "True". If both the "Regular time interval" and "Specific time" options are not set to "True", this is a finding.

Check Text ( C-76529r1_chk )

Note: Recycling Application Pools can create an unstable environment in a 64-bit SharePoint environment. If operational issues arise, with supporting documentation from the ISSO this check can be downgraded to a Cat III.

Open the IIS 8.5 Manager.

Perform for each Application Pool.

Click the “Application Pools”.

Highlight an Application Pool and click "Advanced Settings" in the “Action” Pane.

Scroll down to the "Recycling" section and expand the "Generate Recycle Event Log Entry" section.

Verify both the "Regular time interval" and "Specific time" options are set to "True".

If both the "Regular time interval" and "Specific time" options are not set to "True", this is a finding.

Fix Text (F-83569r1_fix)
Open the IIS 8.5 Manager. Click the “Application Pools”. Perform for each Application Pool. Highlight an Application Pool and click "Advanced Settings" in the “Action” Pane. Scroll down to the "Recycling" section and expand the "Generate Recycle Event Log Entry" section. Set both the "Regular time interval" and "Specific time" options to "True".