V-214344
Apache Server 2.4 Windows Server Security Technical Implementation Guide
Title
The Apache web server must be configured to immediately disconnect or disable remote access to the hosted applications.
Description
<VulnDiscussion>During an attack on the Apache web server or any of the hosted applications, the system administrator may need to disconnect or disable access by users to stop the attack. The Apache web server must be configured to disconnect users to a hosted application without compromising other hosted applications unless deemed necessary to stop the attack. Methods to disconnect or disable connections are to stop the application service for a specified hosted application, stop the Apache we...
Fix Text (Documentation Requirement)
Prepare documented procedures for shutting down an Apache website in the event of an attack. The procedure should, at a minimum, provide the following step: Stop the Apache service.