Advanced Threat Analytics Query

Question

Hi all,

In my environment, Tenable Nessus Scanner had flagged out the "HSTS Missing From HTTPS Server (RFC 6797)" vulnerability for Microsoft Advanced Threat Analytics ver 1.9.3

I checked the Windows OS installed with ATA, but there is no IIS installed by ATA and am stuck at how to resolve this flagged vulnerability.
Would like to check if anyone else encountered the same flagged vulnerability and did u manage to resolve it? (How?)
Also tried checking for links which may indicate the flagged vulnerability for ATA as a "false positive" but to no avail.

Thanks!

Answer 1

Hi,

HSTS header is planned to be added to ATA with 1.9 Update 4 planned for later this year.
There is no way for you to manually add it, as this is a self host web server.

Thanks,

Eli