Ensure FTP Logon attempt restrictions is enabled
Details IIS introduced a built-in network security feature to automatically block brute force FTP attacks. This can be used to...
- Home
- Security Hardening
- CIS IIS 10 V1.1.1 L1
CIS IIS 10 V1.1.1 L1
Ensure FTP requests are encrypted – Control Channel Default
Details The new FTP Publishing Service for IIS supports adding an SSL certificate to an FTP site. Using an SSL...Ensure FTP requests are encrypted – Control Channel Sites
Details The new FTP Publishing Service for IIS supports adding an SSL certificate to an FTP site. Using an SSL...Ensure FTP requests are encrypted – Data Channel Default
Details The new FTP Publishing Service for IIS supports adding an SSL certificate to an FTP site. Using an SSL...Ensure FTP requests are encrypted – Data Channel Sites
Details The new FTP Publishing Service for IIS supports adding an SSL certificate to an FTP site. Using an SSL...Ensure ‘global authorization rule’ is set to restrict access
Details IIS introduced URL Authorization, which allows the addition of Authorization rules to the actual URL, instead of the underlying...Ensure global .NET trust level is configured – Applications
Details This only applies to .Net 2.0. Future versions have stopped supporting this feature. An application’s trust level determines the...Ensure global .NET trust level is configured – Default
Details This only applies to .Net 2.0. Future versions have stopped supporting this feature. An application’s trust level determines the...Ensure Handler is not granted Write and Script/Execute – Applications
Details Handler mappings can be configured to give permissions to Read, Write, Script, or Execute depending on what the use...Ensure Handler is not granted Write and Script/Execute – Default
Details Handler mappings can be configured to give permissions to Read, Write, Script, or Execute depending on what the use...