Solved

IIS 7 reveals internal IP address - appcmd.exe help [PCI scan / PEN testing failure]

Posted on 2014-10-21
4
1,138 Views
Last Modified: 2014-11-01
Hi experts
I have a Exchange 2010 server which has failed a PCI compliance scan during PEN testing.
I need to apply the fix detailed below, which uses appcmd.exe.  I have little knowledge of IIS.
http://blogs.msdn.com/b/mike/archive/2008/11/18/removing-an-iis-server-s-ip-address-from-http-
responses.aspx

suggested cmd is:
appcmd.exe set config -section:system.webServer/serverRuntime /alternateHostName:"myServer"  /commit:apphost

Before I run this cmd I want to find out if my server has an existing alternateHostName and if so what it is.  This is essentially because I want to be able to return be install to it current state in the event this fix causes side effects.

How can I use appcmd.exe [supply code] to find the alternateHostName?
0
Comment
Question by:fieldj
  • 3
4 Comments
 
LVL 79

Expert Comment

by:David Johnson, CD, MVP
ID: 40394517
there are no known side effects of using that fix other than passing your pci text
0
 

Author Comment

by:fieldj
ID: 40394938
Thanks David
Do you know how can I use appcmd.exe [supply code] to find the alternateHostName?
0
 

Accepted Solution

by:
fieldj earned 0 total points
ID: 40406097
I ran the following cmd to backup my IIS config
C:\Windows\System32\inetsrv>appcmd.exe add backup "My Backup Name"
You can confirm this with
C:\Windows\System32\inetsrv>appcmd.exe list backups
And restore if need be
C:\Windows\System32\inetsrv>appcmd.exe restore backup "My Backup Name"

Then I ran the cmd
C:\Windows\System32\inetsrv>appcmd.exe set config "Default Web Site" -section:sy
stem.webServer/serverRuntime /enabled:"True"  /commit:apphost

Followed by the cmd in the posted article
C:\Windows\System32\inetsrv>appcmd.exe set config -section:system.webServer/serv
erRuntime /alternateHostName:"ServerName"  /commit:apphost
0
 

Author Closing Comment

by:fieldj
ID: 40416973
best answer of the responses
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
Utilizing an array to gracefully append to a list of EmailAddresses
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question