An error occurred:

Microsoft IIS 10.0 Server STIG

Microsoft IIS 10.0 Server Security Technical Implementation Guide

ID Vuln ID Title Cat Status
IIST-SV-000102 V-218785 The enhanced logging for the IIS 10.0 web server must be enabled and capture all user and web server events. Cat II
IIST-SV-000103 V-218786 Both the log file and Event Tracing for Windows (ETW) for the IIS 10.0 web server must be enabled. Cat II
IIST-SV-000109 V-218787 An IIS 10.0 web server behind a load balancer or proxy server must produce log records containing the source client IP and destination information. Cat II
IIST-SV-000110 V-218788 The IIS 10.0 web server must produce log records that contain sufficient information to establish the outcome (success or failure) of IIS 10.0 web server events. Cat II
IIST-SV-000111 V-218789 The IIS 10.0 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event. Cat II
IIST-SV-000115 V-218790 The log information from the IIS 10.0 web server must be protected from unauthorized modification or deletion. Cat II
IIST-SV-000116 V-218791 The log data and records from the IIS 10.0 web server must be backed up onto a different system or media. Cat II
IIST-SV-000117 V-218792 The IIS 10.0 web server must not perform user management for hosted applications. Cat II
IIST-SV-000118 V-218793 The IIS 10.0 web server must only contain functions necessary for operation. Cat II
IIST-SV-000119 V-218794 The IIS 10.0 web server must not be both a website server and a proxy server. Cat II
IIST-SV-000120 V-218795 All IIS 10.0 web server sample code, example applications, and tutorials must be removed from a production IIS 10.0 server. Cat I
IIST-SV-000121 V-218796 The accounts created by uninstalled features (i.e., tools, utilities, specific, etc.) must be deleted from the IIS 10.0 server. Cat II
IIST-SV-000123 V-218797 The IIS 10.0 web server must be reviewed on a regular basis to remove any Operating System features, utility programs, plug-ins, and modules not necessary for operation. Cat II
IIST-SV-000124 V-218798 The IIS 10.0 web server must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled. Cat II
IIST-SV-000125 V-218799 The IIS 10.0 web server must have Web Distributed Authoring and Versioning (WebDAV) disabled. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.