Microsoft IIS 10.0 Site Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000141-WSR-000087
<GroupDescription></GroupDescription>Group -
Interactive scripts on the IIS 10.0 web server must be located in unique and designated folders.
<VulnDiscussion>CGI and ASP scripts represent one of the most common and exploitable means of compromising a web server. All CGI and ASP prog...Rule Medium Severity -
SRG-APP-000141-WSR-000087
<GroupDescription></GroupDescription>Group -
Interactive scripts on the IIS 10.0 web server must have restrictive access controls.
<VulnDiscussion>CGI is a programming standard for interfacing external applications with information servers, such as HTTP or web servers. CG...Rule Medium Severity -
SRG-APP-000141-WSR-000087
<GroupDescription></GroupDescription>Group -
Backup interactive scripts on the IIS 10.0 server must be removed.
<VulnDiscussion>Copies of backup files will not execute on the server, but they can be read by the anonymous user if special precautions are ...Rule Medium Severity -
SRG-APP-000516-WSR-000174
<GroupDescription></GroupDescription>Group -
The required DoD banner page must be displayed to authenticated users accessing a DoD private website.
<VulnDiscussion>A consent banner will be in place to inform prospective entrants the website they are about to enter is a DoD website and the...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.