UCF STIG Viewer Logo

The application pool for each IIS 8.5 website must have a recycle time explicitly set.


Overview

Finding ID Version Rule ID IA Controls Severity
V-76873 IISW-SI-000255 SV-91569r1_rule Medium
Description
Application pools can be periodically recycled to avoid unstable states possibly leading to application crashes, hangs, or memory leaks.
STIG Date
IIS 8.5 Site Security Technical Implementation Guide 2020-06-05

Details

Check Text ( C-76529r1_chk )
Note: Recycling Application Pools can create an unstable environment in a 64-bit SharePoint environment. If operational issues arise, with supporting documentation from the ISSO this check can be downgraded to a Cat III.

Open the IIS 8.5 Manager.

Perform for each Application Pool.

Click the “Application Pools”.

Highlight an Application Pool and click "Advanced Settings" in the “Action” Pane.

Scroll down to the "Recycling" section and expand the "Generate Recycle Event Log Entry" section.

Verify both the "Regular time interval" and "Specific time" options are set to "True".

If both the "Regular time interval" and "Specific time" options are not set to "True", this is a finding.
Fix Text (F-83569r1_fix)
Open the IIS 8.5 Manager.

Click the “Application Pools”.

Perform for each Application Pool.

Highlight an Application Pool and click "Advanced Settings" in the “Action” Pane.

Scroll down to the "Recycling" section and expand the "Generate Recycle Event Log Entry" section.

Set both the "Regular time interval" and "Specific time" options to "True".