Ensure ASP.NET stack tracing is not enabled
Details The trace element configures the ASP.NET code tracing service that controls how trace results are gathered, stored, and displayed....
- Home
- Security Hardening
- CIS IIS 8.0 V1.5.0 L2
CIS IIS 8.0 V1.5.0 L2
Ensure ASP.NET stack tracing is not enabled – Applications
Details The trace element configures the ASP.NET code tracing service that controls how trace results are gathered, stored, and displayed....Ensure ASP.NET stack tracing is not enabled – Default
Details The trace element configures the ASP.NET code tracing service that controls how trace results are gathered, stored, and displayed....Ensure ‘cookies’ are set with HttpOnly attribute
Details The httpOnlyCookies attribute of the httpCookies node determines if IIS will set the HttpOnly flag on HTTP cookies it...Ensure ‘cookies’ are set with HttpOnly attribute – Applications
Details The httpOnlyCookies attribute of the httpCookies node determines if IIS will set the HttpOnly flag on HTTP cookies it...Ensure ‘cookies’ are set with HttpOnly attribute – Default
Details The httpOnlyCookies attribute of the httpCookies node determines if IIS will set the HttpOnly flag on HTTP cookies it...Ensure ‘credentials’ are not stored in configuration files – Applications
Details The element of the element allows optional definitions of name and password for IIS Manager User accounts within the...Ensure ‘credentials’ are not stored in configuration files – Default
Details The element of the element allows optional definitions of name and password for IIS Manager User accounts within the...Ensure Custom Error Messages are not Off
Details When an ASP.NET application fails and causes an HTTP/1.x 500 Internal Server Error, or a feature configuration (such as...Ensure Custom Error Messages are not Off – Applications
Details When an ASP.NET application fails and causes an HTTP/1.x 500 Internal Server Error, or a feature configuration (such as...