The Apache "KeepAliveTimeout" directive should be configured appropriately. (1) Number value (in seconds) (1) Apache configuration file: KeepAliveTimeout directive L1 10. Denial of Service (DoS) Protective General Directives pg 16 Rule Title: The KeepAliveTimeout directive must be defined. STIG ID: WA000-WWA024 A22 Rule ID: SV-32877r1_rule Vuln ID: V-13726 Severity: CAT II Class: Unclass Rule Title: The KeepAliveTimeout directive must be defined. STIG ID: WA000-WWA024 W22 Rule ID: SV-32880r1_rule Vuln ID: V-13726 Severity: CAT II Class: Unclass CIS Apache Benchmark for Unix v1.7 For Apache Versions 1.3 and 2.0 CIS 2007-07-01 Version 1.7 Prose (PDF) APACHE SERVER 2.0 for Windows, Version1, Release 1 Version1, Release 1 Prose(pdf) APACHE SERVER 2.0 for Windows, Version1, Release 1 DISA 2011-11-23 Version1, Release 1 Prose(rtf)