Ensure ASP.NET stack tracing is not enabled – Applications
Details The trace element configures the ASP.NET code tracing service that controls how trace results are gathered, stored, and displayed....
- Home
- Security Hardening
- CIS IIS 10 V1.1.1 L2
CIS IIS 10 V1.1.1 L2
Ensure ASP.NET stack tracing is not enabled – Default
Details The trace element configures the ASP.NET code tracing service that controls how trace results are gathered, stored, and displayed....Ensure ‘credentials’ are not stored in configuration files – Applications
Details The element of the element allows optional definitions of name and password for IIS Manager User accounts within the...Ensure ‘credentials’ are not stored in configuration files – Default
Details The element of the element allows optional definitions of name and password for IIS Manager User accounts within the...Ensure custom error messages are not off – Applications
Details When an ASP.NET application fails and causes an HTTP/1.x 500 Internal Server Error, or a feature configuration (such as...Ensure custom error messages are not off – Default
Details When an ASP.NET application fails and causes an HTTP/1.x 500 Internal Server Error, or a feature configuration (such as...Ensure ‘debug’ is turned off – Applications
Details Developers often enable the debug mode during active ASP.NET development so that they do not have to continually clear...Ensure ‘debug’ is turned off – Default
Details Developers often enable the debug mode during active ASP.NET development so that they do not have to continually clear...Ensure ‘forms authentication’ is set to use cookies – Application
Details Forms Authentication can be configured to maintain the site visitor’s session identifier in either a URI or cookie. It...Ensure ‘forms authentication’ is set to use cookies – Default
Details Forms Authentication can be configured to maintain the site visitor’s session identifier in either a URI or cookie. It...