Home
Security Hardening
DISA IIS 8.5 Server V2R1

DISA IIS 8.5 Server V2R1

IISW-SV-000115 – The log information from the IIS 8.5 web server must be protected from unauthorized modification or deletion.
Details A major tool in exploring the website use, attempted use, unusual conditions, and problems are the access and error...
IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Referer
Details Log files are a critical component to the successful management of an IS used within the DoD. By generating...
IISW-SV-000116 – The log data and records from the IIS 8.5 web server must be backed up onto a different system or media.
Details Protection of log data includes assuring log data is not accidentally lost or deleted. Backing up log records to...
IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Status
Details Log files are a critical component to the successful management of an IS used within the DoD. By generating...
IISW-SV-000117 – The IIS 8.5 web server must not perform user management for hosted applications.
Details User management and authentication can be an essential part of any application hosted by the web server. Along with...
IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Time
Details Log files are a critical component to the successful management of an IS used within the DoD. By generating...
IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field User
Details Log files are a critical component to the successful management of an IS used within the DoD. By generating...
IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Format W3C
Details Log files are a critical component to the successful management of an IS used within the DoD. By generating...
IISW-SV-000103 – Both the log file and Event Tracing for Windows (ETW) for the IIS 8.5 web server must be enabled.
Details Internet Information Services (IIS) on Windows Server 2012 provides basic logging capabilities. However, because IIS takes some time to...
IISW-SV-000109 – An IIS 8.5 web server behind a load balancer or proxy server, must produce log records containing the source client IP and destination information.
Details Web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of...

Prev Next

DISA IIS 8.5 Server V2R1

IISW-SV-000115 – The log information from the IIS 8.5 web server must be protected from unauthorized modification or deletion.

IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Referer

IISW-SV-000116 – The log data and records from the IIS 8.5 web server must be backed up onto a different system or media.

IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Status

IISW-SV-000117 – The IIS 8.5 web server must not perform user management for hosted applications.

IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field Time

IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Field User

IISW-SV-000102 – The enhanced logging for the IIS 8.5 web server must be enabled and capture all user and web server events – Format W3C

IISW-SV-000103 – Both the log file and Event Tracing for Windows (ETW) for the IIS 8.5 web server must be enabled.

IISW-SV-000109 – An IIS 8.5 web server behind a load balancer or proxy server, must produce log records containing the source client IP and destination information.