Home
Security Hardening
DISA IIS 8.5 Server V2R1

DISA IIS 8.5 Server V2R1

IISW-SV-000100 – The IIS 8.5 web server remote authors or content providers must only use secure encrypted logons and connections to upload web server content.
Details Logging onto a web server remotely using an unencrypted protocol or service when performing updates and maintenance is a...
IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Date
Details Log files are a critical component to the successful management of an IS used within the DoD. By generating...
IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field IP
Details Log files are a critical component to the successful management of an IS used within the DoD. By generating...
IISW-SV-000111 – The IIS 8.5 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – Custom Content-Type
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IISW-SV-000111 – The IIS 8.5 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – Custom User-Agent
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IISW-SV-000111 – The IIS 8.5 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – Referer
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IISW-SV-000111 – The IIS 8.5 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – UserAgent
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Method
Details Log files are a critical component to the successful management of an IS used within the DoD. By generating...
IISW-SV-000111 – The IIS 8.5 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – User Name
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...
IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Query
Details Log files are a critical component to the successful management of an IS used within the DoD. By generating...

DISA IIS 8.5 Server V2R1

IISW-SV-000100 – The IIS 8.5 web server remote authors or content providers must only use secure encrypted logons and connections to upload web server content.

IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Date

IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field IP

IISW-SV-000111 – The IIS 8.5 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – Custom Content-Type

IISW-SV-000111 – The IIS 8.5 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – Custom User-Agent

IISW-SV-000111 – The IIS 8.5 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – Referer

IISW-SV-000111 – The IIS 8.5 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – UserAgent

IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Method

IISW-SV-000111 – The IIS 8.5 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event – User Name

IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Query