Ensure ‘forms authentication’ require SSL – Default
Details Forms-based authentication can pass credentials across the network in clear text. It is therefore imperative that the traffic between...
- Home
- Security Hardening
- CIS IIS 7 L1 V1.8.0
CIS IIS 7 L1 V1.8.0
Ensure ‘forms authentication’ require SSL – Not Enabled
Details Forms-based authentication can pass credentials across the network in clear text. It is therefore imperative that the traffic between...Ensure FTP requests are encrypted – Control Channel
Details The new FTP Publishing Service for IIS supports adding an SSL certificate to an FTP site. Using an SSL...Ensure FTP requests are encrypted – Control Channel Default
Details The new FTP Publishing Service for IIS supports adding an SSL certificate to an FTP site. Using an SSL...Ensure FTP requests are encrypted – Control Channel Sites
Details The new FTP Publishing Service for IIS supports adding an SSL certificate to an FTP site. Using an SSL...Ensure FTP requests are encrypted – Data Channel Default
Details The new FTP Publishing Service for IIS supports adding an SSL certificate to an FTP site. Using an SSL...Ensure FTP requests are encrypted – Data Channel Sites
Details The new FTP Publishing Service for IIS supports adding an SSL certificate to an FTP site. Using an SSL...Ensure ‘global authorization rule’ is set to restrict access
Details IIS introduced URL Authorization, which allows the addition of Authorization rules to the actual URL, instead of the underlying...Ensure global .NET trust level is configured
Details This only applies to .Net 2.0. Future versions have stopped supporting this feature. An application’s trust level determines the...Ensure global .NET trust level is configured – Applications
Details This only applies to .Net 2.0. Future versions have stopped supporting this feature. An application’s trust level determines the...