IIST-SV-000136 – The IIS 10.0 web server must augment re-creation to a stable and known baseline. Details Making certain that the web server has not been updated by an unauthorized user is always a concern. Adding...
IIST-SV-000137 – The production IIS 10.0 web server must utilize SHA2 encryption for the Machine Key – Encryption Method Details The Machine Key element of the ASP.NET web.config specifies the algorithm and keys that ASP.NET will use for encryption....
IIST-SV-000137 – The production IIS 10.0 web server must utilize SHA2 encryption for the Machine Key – Validation Method Details The Machine Key element of the ASP.NET web.config specifies the algorithm and keys that ASP.NET will use for encryption....
IIST-SV-000138 – Directory Browsing on the IIS 10.0 web server must be disabled. Details Directory browsing allows the contents of a directory to be displayed upon request from a web client. If directory...
IIST-SV-000139 – The IIS 10.0 web server Indexing must only index web content. Details The indexing service can be used to facilitate a search function for websites. Enabling indexing may facilitate a directory...