Ensure ‘maxURL request filter’ is configured – Applications
Details The maxURL attribute of the property is the maximum length (in Bytes) in which a requested URL can be...
- Home
- Security Hardening
- CIS IIS 10 V1.1.1 L2
CIS IIS 10 V1.1.1 L2
Ensure ‘maxURL request filter’ is configured – Default
Details The maxURL attribute of the property is the maximum length (in Bytes) in which a requested URL can be...Ensure non-ASCII characters in URLs are not allowed – Applications
Details This feature is used to allow or reject all requests to IIS that contain non-ASCII characters. When using this...Ensure non-ASCII characters in URLs are not allowed – Default
Details This feature is used to allow or reject all requests to IIS that contain non-ASCII characters. When using this...Ensure Server Header is removed – Applications
Details The server header may specify the underlying technology used by an application. Attackers are able to conduct reconnaissance on...Ensure Server Header is removed – Default
Details The server header may specify the underlying technology used by an application. Attackers are able to conduct reconnaissance on...Ensure TLS Cipher Suite ordering is Configured
Details Cipher suites are a named combination of authentication, encryption, message authentication code, and key exchange algorithms used for the...Ensure X-Powered-By Header is removed – Applications
Details The x-powered-by headers may specify the underlying technology used by an application. Attackers are able to conduct reconnaissance on...Ensure X-Powered-By Header is removed – Default
Details The x-powered-by headers may specify the underlying technology used by an application. Attackers are able to conduct reconnaissance on...