DISA IIS 7.0 Web Site v1r19

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: DISA IIS 7.0 Web Site v1r19

Updated: 4/12/2023

Authority: DISA STIG

Plugin: Windows

Revision: 1.1

Estimated Item Count: 50

Audit Changelog

 
Revision 1.1

Apr 12, 2023

Functional Update
  • WG240 IIS7 - Web-site logging must be enabled.
  • WG242 IIS7 - Log files must consist of the required data fields.
  • WG340 IIS7 - A private web server must utilize an approved TLS version.
  • WG342 IIS7 - Public web servers must use TLS if authentication is required.
  • WG400 IIS7 - All interactive programs must be placed in unique designated folders.
  • WG410 IIS7 - All interactive programs must have restrictive access controls.
Miscellaneous
  • Metadata updated.
  • References updated.