BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

WN25-00-000430 Windows Server 2025 FTP servers must be configured to prevent access to the system drive.

DISA STIG library V1R4
All changes in this version
first version loaded CAT II

Maps to CM-6 via CCI-000366

Title

Windows Server 2025 FTP servers must be configured to prevent access to the system drive.

Control

If FTP is not installed on the system, this is not applicable. Open Internet Information Services (IIS) Manager. Select "Sites" under the server name. For any sites with a Binding that lists FTP, right-click the site and select "Explore". If the site is not defined to a specific folder for shared FTP resources, this is a finding. If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding.

Discussion

The FTP service allows remote users to access shared files and directories that could provide access to system resources and compromise the system, especially if the user can gain access to the root directory of the boot drive.

Related controls

CCI-000366

Fix

Configure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system.