Home
Security Hardening
DISA IIS 10.0 Site V2R1

DISA IIS 10.0 Site V2R1

IIST-SI-000210 – The IIS 10.0 website must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – User Agent
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IIST-SI-000210 – The IIS 10.0 website must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – User Name
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IIST-SI-000214 – The IIS 10.0 website must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled – bat
Details Controlling what a user of a hosted application can access is part of the security posture of the web...
IIST-SI-000214 – The IIS 10.0 website must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled – com
Details Controlling what a user of a hosted application can access is part of the security posture of the web...
IIST-SI-000229 – Double encoded URL requests must be prohibited by any IIS 10.0 website.
Details Request filtering enables administrators to create a more granular rule set with which to allow or reject inbound web...
IIST-SI-000230 – Unlisted file extensions in URL requests must be filtered by any IIS 10.0 website.
Details Request filtering enables administrators to create a more granular rule set to allow or reject inbound web content. Setting...
IIST-SI-000231 – Directory Browsing on the IIS 10.0 website must be disabled.
Details Directory browsing allows the contents of a directory to be displayed upon request from a web client. If directory...
IIST-SI-000233 – Warning and error messages displayed to clients must be modified to minimize the identity of the IIS 10.0 website, patches, loaded modules, and directory paths.
Details HTTP error pages contain information that could enable an attacker to gain access to an information system. Failure to...
IIST-SI-000234 – Debugging and trace information used to diagnose the IIS 10.0 website must be disabled.
Details Setting compilation debug to false ensures detailed error information does not inadvertently display during live application usage, mitigating the...
IIST-SI-000235 – The Idle Time-out monitor for each IIS 10.0 website must be enabled.
Details The idle time-out attribute controls the amount of time a worker process will remain idle before it shuts down....

Prev Next

DISA IIS 10.0 Site V2R1

IIST-SI-000210 – The IIS 10.0 website must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – User Agent

IIST-SI-000210 – The IIS 10.0 website must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – User Name

IIST-SI-000214 – The IIS 10.0 website must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled – bat

IIST-SI-000214 – The IIS 10.0 website must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled – com

IIST-SI-000229 – Double encoded URL requests must be prohibited by any IIS 10.0 website.

IIST-SI-000230 – Unlisted file extensions in URL requests must be filtered by any IIS 10.0 website.

IIST-SI-000231 – Directory Browsing on the IIS 10.0 website must be disabled.

IIST-SI-000233 – Warning and error messages displayed to clients must be modified to minimize the identity of the IIS 10.0 website, patches, loaded modules, and directory paths.

IIST-SI-000234 – Debugging and trace information used to diagnose the IIS 10.0 website must be disabled.

IIST-SI-000235 – The Idle Time-out monitor for each IIS 10.0 website must be enabled.