Internet Information System (IIS) or its subcomponents must not be installed on a workstation.
An XCCDF Rule
Description
IIS is not installed by default. Installation of Internet Information System (IIS) may allow unauthorized internet services to be hosted. Websites must only be hosted on servers that have been designed for that purpose and can be adequately secured.
- ID
- SV-253275r958478_rule
- Version
- WN11-00-000100
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Uninstall "Internet Information Services" or "Internet Information Services Hostable Web Core" from the system.