Revision 1.1Apr 12, 2023
Functional Update
- WG240 IIS7 - Web-site logging must be enabled.
- WG242 IIS7 - Log files must consist of the required data fields.
- WG340 IIS7 - A private web server must utilize an approved TLS version.
- WG342 IIS7 - Public web servers must use TLS if authentication is required.
- WG400 IIS7 - All interactive programs must be placed in unique designated folders.
- WG410 IIS7 - All interactive programs must have restrictive access controls.
Miscellaneous
- Metadata updated.
- References updated.