Skip to content

Microsoft IIS 10.0 Server Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000141-WSR-000077

    <GroupDescription></GroupDescription>
    Group
  • All IIS 10.0 web server sample code, example applications, and tutorials must be removed from a production IIS 10.0 server.

    &lt;VulnDiscussion&gt;Web server documentation, sample code, example applications, and tutorials may be an exploitable threat to a web server. A pr...
    Rule High Severity
  • SRG-APP-000141-WSR-000078

    <GroupDescription></GroupDescription>
    Group
  • The accounts created by uninstalled features (i.e., tools, utilities, specific, etc.) must be deleted from the IIS 10.0 server.

    &lt;VulnDiscussion&gt;Accounts used for web server features such as documentation, sample code, example applications, tutorials, utilities, and ser...
    Rule Medium Severity
  • SRG-APP-000141-WSR-000080

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules