Solved

Hardening Window Web servers(IIS 6, 7)

Posted on 2010-11-29
3
950 Views
Last Modified: 2012-05-10
Hello Experts,

I just wondering if you can provide me with some docs, links, and your recommendations in how to hardening Windows Web servers IIS 6, IIS 7, and deploy full security on these boxes

Any feedback is really appreciated

Thank you in advance
0
Comment
Question by:Jerry Seinfield
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 1

Expert Comment

by:JrLz
ID: 34236263
Hi,

there's a tool called IIS LockDown from Microsoft, you can take a look for the details
before applying the tool.

hope it helps
0
 
LVL 9

Accepted Solution

by:
shalabhsharma earned 500 total points
ID: 34236401
0
 
LVL 9

Expert Comment

by:losip
ID: 34236963
My favorite is "Improving Web Application Security: Threats and Countermeasures" which is a Microsoft publication and available online.  It complements the "out-of-the-box" security afforded by IIS6 and IIS7 by pointing out that the applications have to be secure, too.

It is a fairly old publication but still has relevant guidelines for application developers. It can be downloaded from: http://www.microsoft.com/downloads/en/details.aspx?FamilyId=E9C4BFAA-AF88-4AA5-88D4-0DEA898C31B9&displaylang=en 

The thread that shalabsharma pointed out on formus.iis.net has some useful pointers, too
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OfficeMate Freezes on login or does not load after login credentials are input.
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question