Revision 1.1

Apr 12, 2023
Functional Update
  • WG240 IIS7 - Web-site logging must be enabled.
  • WG242 IIS7 - Log files must consist of the required data fields.
  • WG340 IIS7 - A private web server must utilize an approved TLS version.
  • WG342 IIS7 - Public web servers must use TLS if authentication is required.
  • WG400 IIS7 - All interactive programs must be placed in unique designated folders.
  • WG410 IIS7 - All interactive programs must have restrictive access controls.
Miscellaneous
  • Metadata updated.
  • References updated.