IIS 7.0 Site STIG Version Comparison

There are 2 differences between versions v1 r17 (Oct. 26, 2018) (the "left" version) and v1 r19 (Jan. 24, 2020) (the "right" version).

Check WG500 was added to the benchmark in the "right" version.

This check's original form is available here.

Title

The installed version of IIS must be a supported version.

Check Content

Procedure: Open IIS Manager, Select Help, Select About IIS. Microsoft support for Internet Information Services (IIS) 7 ended 2020 January. If IIS 7 is installed on a system, this is a finding.

Discussion

Unsupported versions of the operating system do not contain new security-related features and security patches that address known vulnerabilities. Software or hardware no longer supported by the manufacturer or vendor are not maintained or updated for current vulnerabilities, leaving them open to potential attack.

Fix

Upgrade IIS to a supported software version.