Ensure HSTS Header is set – Server
Details HTTP Strict Transport Security (HSTS) allows a site to inform the user agent to communicate with the site only...
- Home
- Security Hardening
- CIS IIS 10 V1.1.1 L2
CIS IIS 10 V1.1.1 L2
Ensure HSTS Header is set – Sites
Details HTTP Strict Transport Security (HSTS) allows a site to inform the user agent to communicate with the site only...Ensure ‘httpcookie’ mode is configured for session state – Applications
Details A session cookie associates session information with client information for that session, which can be the duration of a...Ensure ‘httpcookie’ mode is configured for session state – Default
Details A session cookie associates session information with client information for that session, which can be the duration of a...Ensure ‘MachineKey validation method – .Net 3.5’ is configured – Applications
Details The machineKey element of the ASP.NET web.config specifies the algorithm and keys that ASP.NET will use for encryption. The...Ensure ‘MachineKey validation method – .Net 3.5’ is configured – Default
Details The machineKey element of the ASP.NET web.config specifies the algorithm and keys that ASP.NET will use for encryption. The...Ensure ‘maxAllowedContentLength’ is configured – Applications
Details The maxAllowedContentLength Request Filter is the maximum size of the http request, measured in bytes, which can be sent...Ensure ‘maxAllowedContentLength’ is configured – Default
Details The maxAllowedContentLength Request Filter is the maximum size of the http request, measured in bytes, which can be sent...Ensure ‘MaxQueryString request filter’ is configured – Applications
Details The MaxQueryString Request Filter describes the upper limit on the length of the query string that the configured IIS...Ensure ‘MaxQueryString request filter’ is configured – Default
Details The MaxQueryString Request Filter may be set for a server, website, or application using the IIS Manager GUI, using...