Home
Security Hardening
DISA IIS 10.0 Server V2R1

DISA IIS 10.0 Server V2R1

IIST-SV-000102 – The enhanced logging for the IIS 10.0 web server must be enabled and capture all user and web server events – Format W3C
Details Log files are a critical component to the successful management of an IS used within the DoD. By generating...
IIST-SV-000103 – Both the log file and Event Tracing for Windows (ETW) for the IIS 10.0 web server must be enabled.
Details Internet Information Services (IIS) on Windows Server 2012 provides basic logging capabilities. However, because IIS takes some time to...
IIST-SV-000109 – An IIS 10.0 web server behind a load balancer or proxy server must produce log records containing the source client IP and destination information.
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IIST-SV-000110 – The IIS 10.0 web server must produce log records that contain sufficient information to establish the outcome (success or failure) of IIS 10.0 web server events – Connection
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IIST-SV-000110 – The IIS 10.0 web server must produce log records that contain sufficient information to establish the outcome (success or failure) of IIS 10.0 web server events – Warning
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IIST-SV-000111 – The IIS 10.0 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – Custom Authorization
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IIST-SV-000124 – The IIS 10.0 web server must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled – exe
Details Controlling what a user of a hosted application can access is part of the security posture of the web...
IIST-SV-000111 – The IIS 10.0 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – Referer
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IIST-SV-000125 – The IIS 10.0 web server must have Web Distributed Authoring and Versioning (WebDAV) disabled.
Details A web server can be installed with functionality that by its nature is not secure. Web Distributed Authoring (WebDAV)...
IIST-SV-000111 – The IIS 10.0 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – UserAgent
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...

Prev Next

DISA IIS 10.0 Server V2R1

IIST-SV-000102 – The enhanced logging for the IIS 10.0 web server must be enabled and capture all user and web server events – Format W3C

IIST-SV-000103 – Both the log file and Event Tracing for Windows (ETW) for the IIS 10.0 web server must be enabled.

IIST-SV-000109 – An IIS 10.0 web server behind a load balancer or proxy server must produce log records containing the source client IP and destination information.

IIST-SV-000110 – The IIS 10.0 web server must produce log records that contain sufficient information to establish the outcome (success or failure) of IIS 10.0 web server events – Connection

IIST-SV-000110 – The IIS 10.0 web server must produce log records that contain sufficient information to establish the outcome (success or failure) of IIS 10.0 web server events – Warning

IIST-SV-000111 – The IIS 10.0 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – Custom Authorization

IIST-SV-000124 – The IIS 10.0 web server must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled – exe

IIST-SV-000111 – The IIS 10.0 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – Referer

IIST-SV-000125 – The IIS 10.0 web server must have Web Distributed Authoring and Versioning (WebDAV) disabled.

IIST-SV-000111 – The IIS 10.0 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – UserAgent