System Services: ASP .NET State ServiceID: oval:org.secpod.oval:def:22731 | Date: (C)2015-01-07 (M)2023-07-31 |
Class: COMPLIANCE | Family: windows |
ASP.NET State Service provides support for out-of-process session states for Microsoft ASP.NET, a unified Web development platform. ASP.NET has a concept of session state ? a listing of values associated with the client session is accessible from ASP.NET pages through the Session property. Three options are provided for storing the session data: in process, SQL database, and out-of-process session state server. The ASP.NET State Service stores out-of-process session data. The service communicates with ASP.NET by using sockets.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services!ASP.NET State Service
(2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\aspnet_state!Start
Platform: |
Microsoft Windows Server 2012 R2 |