Microsoft IIS 10.0 Site Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000516-WSR-000174
Group -
SRG-APP-000141-WSR-000087
Group -
Interactive scripts on the IIS 10.0 web server must be located in unique and designated folders.
CGI and ASP scripts represent one of the most common and exploitable means of compromising a web server. All CGI and ASP program files must be segregated into their own unique folder to simplify th...Rule Medium Severity -
SRG-APP-000141-WSR-000087
Group -
SRG-APP-000141-WSR-000087
Group -
Backup interactive scripts on the IIS 10.0 server must be removed.
Copies of backup files will not execute on the server, but they can be read by the anonymous user if special precautions are not taken. Such backup copies contain the same sensitive information as ...Rule Medium Severity -
SRG-APP-000516-WSR-000174
Group -
The required DoD banner page must be displayed to authenticated users accessing a DoD private website.
A consent banner will be in place to inform prospective entrants the website they are about to enter is a DoD website and their activity is subject to monitoring. The document, DoDI 8500.01, establ...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules