| Vuln ID | Severity | Asset | STIG | Title | Status | Doc Status | Assigned To | Actions |
|---|---|---|---|---|---|---|---|---|
| V-224861 | CAT II | MONT-VSF-004 | Microsoft Windows Server 2016 Security T... | FTP servers must be configured to prevent access t... | - | |||
Check TextIf FTP is not installed on the system, this is NA. Open "Internet Information Services (IIS) Manager". Select "Sites" under the server name. For any sites with a Binding that lists FTP, right-click the site and select "Explore". If the site is not defined to a specific folder for shared FTP resources, this is a finding. If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding. Fix TextConfigure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: F9DCDC8F14F142B02A2D30638861413223405760 ~~~~~ Web-Ftp-Server is not installed on this system. Confirm if 3rd-party FTP is installed and if it is, verify configuration is compliant per STIG. If no 3rd-party FTP is installed, mark this as Not Applicable.
Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_WinServer2016_V2R10_20251023-143909.ckl
Scan Date: 2026-01-14T12:57:30.046447
Technology Area: Windows Operating System
|
||||||||
| V-224861 | CAT II | MONT-VSF-003 | Microsoft Windows Server 2016 Security T... | FTP servers must be configured to prevent access t... | - | |||
Check TextIf FTP is not installed on the system, this is NA. Open "Internet Information Services (IIS) Manager". Select "Sites" under the server name. For any sites with a Binding that lists FTP, right-click the site and select "Explore". If the site is not defined to a specific folder for shared FTP resources, this is a finding. If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding. Fix TextConfigure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: F9DCDC8F14F142B02A2D30638861413223405760 ~~~~~ Web-Ftp-Server is not installed on this system. Confirm if 3rd-party FTP is installed and if it is, verify configuration is compliant per STIG. If no 3rd-party FTP is installed, mark this as Not Applicable.
Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_WinServer2016_V2R10_20251023-143935.ckl
Scan Date: 2026-01-14T12:57:31.534241
Technology Area: Windows Operating System
|
||||||||
| V-224861 | CAT II | MONT-MB-002 | Microsoft Windows Server 2016 Security T... | FTP servers must be configured to prevent access t... | - | |||
Check TextIf FTP is not installed on the system, this is NA. Open "Internet Information Services (IIS) Manager". Select "Sites" under the server name. For any sites with a Binding that lists FTP, right-click the site and select "Explore". If the site is not defined to a specific folder for shared FTP resources, this is a finding. If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding. Fix TextConfigure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: F9DCDC8F14F142B02A2D30638861413223405760 ~~~~~ Web-Ftp-Server is not installed on this system. Confirm if 3rd-party FTP is installed and if it is, verify configuration is compliant per STIG. If no 3rd-party FTP is installed, mark this as Not Applicable.
Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_WinServer2016_V2R10_20251023-152736.ckl
Scan Date: 2026-01-14T12:57:33.842838
Technology Area: Windows Operating System
|
||||||||
| V-224861 | CAT II | MONT-DP-001 | Microsoft Windows Server 2016 Security T... | FTP servers must be configured to prevent access t... | - | |||
Check TextIf FTP is not installed on the system, this is NA. Open "Internet Information Services (IIS) Manager". Select "Sites" under the server name. For any sites with a Binding that lists FTP, right-click the site and select "Explore". If the site is not defined to a specific folder for shared FTP resources, this is a finding. If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding. Fix TextConfigure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: F9DCDC8F14F142B02A2D30638861413223405760 ~~~~~ Web-Ftp-Server is not installed on this system. Confirm if 3rd-party FTP is installed and if it is, verify configuration is compliant per STIG. If no 3rd-party FTP is installed, mark this as Not Applicable.
Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_WinServer2016_V2R10_20251023-144106.ckl
Scan Date: 2026-01-14T12:57:35.637816
Technology Area: Windows Operating System
|
||||||||
| V-224861 | CAT II | MONT-DC-003 | Microsoft Windows Server 2016 Security T... | FTP servers must be configured to prevent access t... | - | |||
Check TextIf FTP is not installed on the system, this is NA. Open "Internet Information Services (IIS) Manager". Select "Sites" under the server name. For any sites with a Binding that lists FTP, right-click the site and select "Explore". If the site is not defined to a specific folder for shared FTP resources, this is a finding. If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding. Fix TextConfigure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: F9DCDC8F14F142B02A2D30638861413223405760 ~~~~~ Web-Ftp-Server is not installed on this system. Confirm if 3rd-party FTP is installed and if it is, verify configuration is compliant per STIG. If no 3rd-party FTP is installed, mark this as Not Applicable.
Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_WinServer2016_V2R10_20251023-172220.ckl
Scan Date: 2026-01-14T12:57:37.248886
Technology Area: Windows Operating System
|
||||||||
| V-224861 | CAT II | MONT-DB-002 | Microsoft Windows Server 2016 Security T... | FTP servers must be configured to prevent access t... | - | |||
Check TextIf FTP is not installed on the system, this is NA. Open "Internet Information Services (IIS) Manager". Select "Sites" under the server name. For any sites with a Binding that lists FTP, right-click the site and select "Explore". If the site is not defined to a specific folder for shared FTP resources, this is a finding. If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding. Fix TextConfigure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: F9DCDC8F14F142B02A2D30638861413223405760 ~~~~~ Web-Ftp-Server is not installed on this system. Confirm if 3rd-party FTP is installed and if it is, verify configuration is compliant per STIG. If no 3rd-party FTP is installed, mark this as Not Applicable.
Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_WinServer2016_V2R10_20251023-144132.ckl
Scan Date: 2026-01-14T12:57:39.082634
Technology Area: Windows Operating System
|
||||||||
| V-224861 | CAT II | MONT-BE-002 | Microsoft Windows Server 2016 Security T... | FTP servers must be configured to prevent access t... | - | |||
Check TextIf FTP is not installed on the system, this is NA. Open "Internet Information Services (IIS) Manager". Select "Sites" under the server name. For any sites with a Binding that lists FTP, right-click the site and select "Explore". If the site is not defined to a specific folder for shared FTP resources, this is a finding. If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding. Fix TextConfigure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: F9DCDC8F14F142B02A2D30638861413223405760 ~~~~~ Web-Ftp-Server is not installed on this system. Confirm if 3rd-party FTP is installed and if it is, verify configuration is compliant per STIG. If no 3rd-party FTP is installed, mark this as Not Applicable.
Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_WinServer2016_V2R10_20251023-143943.ckl
Scan Date: 2026-01-14T12:57:41.363810
Technology Area: Windows Operating System
|
||||||||
| V-224861 | CAT II | MONT-AP-002 | Microsoft Windows Server 2016 Security T... | FTP servers must be configured to prevent access t... | - | |||
Check TextIf FTP is not installed on the system, this is NA. Open "Internet Information Services (IIS) Manager". Select "Sites" under the server name. For any sites with a Binding that lists FTP, right-click the site and select "Explore". If the site is not defined to a specific folder for shared FTP resources, this is a finding. If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding. Fix TextConfigure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: F9DCDC8F14F142B02A2D30638861413223405760 ~~~~~ Web-Ftp-Server is not installed on this system. Confirm if 3rd-party FTP is installed and if it is, verify configuration is compliant per STIG. If no 3rd-party FTP is installed, mark this as Not Applicable.
Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_WinServer2016_V2R10_20251023-144214.ckl
Scan Date: 2026-01-14T12:57:42.721079
Technology Area: Windows Operating System
|
||||||||