Ensure ‘ETW Logging’ is enabled – Default ETW
Details IIS introduces a new logging method. Administrators can now send logging information to Event Tracing for Windows (ETW). IIS...
- Home
- Security Hardening
- CIS IIS 8.0 V1.5.0 L1
CIS IIS 8.0 V1.5.0 L1
Ensure ‘ETW Logging’ is enabled – Default W3C
Details IIS introduces a new logging method. Administrators can now send logging information to Event Tracing for Windows (ETW). IIS...Ensure ‘ETW Logging’ is enabled – Sites logFormat W3C
Details IIS introduces a new logging method. Administrators can now send logging information to Event Tracing for Windows (ETW). IIS...Ensure ‘ETW Logging’ is enabled – Sites logFormat W3C with ETW target
Details IIS introduces a new logging method. Administrators can now send logging information to Event Tracing for Windows (ETW). IIS...Ensure ‘forms authentication’ require SSL – Applications
Details Forms-based authentication can pass credentials across the network in clear text. It is therefore imperative that the traffic between...Ensure ‘forms authentication’ require SSL – Default
Details Forms-based authentication can pass credentials across the network in clear text. It is therefore imperative that the traffic between...Ensure ‘forms authentication’ require SSL – Not Enabled
Details Forms-based authentication can pass credentials across the network in clear text. It is therefore imperative that the traffic between...Ensure ‘global authorization rule’ is set to restrict access
Details IIS introduced URL Authorization, which allows the addition of Authorization rules to the actual URL, instead of the underlying...Ensure global .NET trust level is configured
Details This only applies to .Net 2.0. Future versions have stopped supporting this feature. An application’s trust level determines the...Ensure global .NET trust level is configured – Applications
Details This only applies to .Net 2.0. Future versions have stopped supporting this feature. An application’s trust level determines the...