CIS IIS 7 L1 v1.8.0

Audit Details

Name: CIS IIS 7 L1 v1.8.0

Updated: 4/25/2022

Authority: CIS

Plugin: Windows

Revision: 1.12

Estimated Item Count: 72

File Details

Filename: CIS_v1.8_MS_IIS_7_Level_1.audit

Size: 173 kB

MD5: 6d12a20526ff18748716ba547812858d
SHA256: 1a55bb723f54c992aa65ee3580acce9a66d4536482333f340f80f88bf6432215

Audit Changelog

 
Revision 1.12

Apr 25, 2022

Informational Update
  • 3.10 Ensure global .NET trust level is configured
Revision 1.11

Mar 29, 2022

Informational Update
  • 3.10 Ensure global .NET trust level is configured
Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.10

Jun 17, 2021

Informational Update
  • 3.10 Ensure global .NET trust level is configured
Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.9

Feb 1, 2021

Informational Update
  • 3.10 Ensure global .NET trust level is configured
Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.8

Sep 29, 2020

Informational Update
  • 3.10 Ensure global .NET trust level is configured
Miscellaneous
  • References updated.
Revision 1.7

Jun 28, 2020

Functional Update
  • 2.3 Ensure 'forms authentication' require SSL - Applications
  • 2.3 Ensure 'forms authentication' require SSL - Default
  • 2.3 Ensure 'forms authentication' require SSL - Not Enabled
  • 2.5 Ensure 'cookie protection mode' is configured for forms authentication - Applications
  • 2.5 Ensure 'cookie protection mode' is configured for forms authentication - Default
  • 2.5 Ensure 'cookie protection mode' is configured for forms authentication - Not Enabled
  • 3.1 Ensure 'deployment method retail' is set
  • 3.10 Ensure global .NET trust level is configured
  • 3.10 Ensure global .NET trust level is configured - Applications
  • 3.10 Ensure global .NET trust level is configured - Default
  • 3.4 Ensure IIS HTTP detailed errors are hidden from displaying remotely - Applications
  • 3.4 Ensure IIS HTTP detailed errors are hidden from displaying remotely - Default
  • 3.8 Configure MachineKey Validation Method - .Net 3.5 - Applications
  • 3.8 Configure MachineKey Validation Method - .Net 3.5 - Default
  • 3.9 Ensure 'MachineKey validation method - .Net 4.5' is configured
  • 3.9 Ensure 'MachineKey validation method - .Net 4.5' is configured - Applications
  • 3.9 Ensure 'MachineKey validation method - .Net 4.5' is configured - Default
Informational Update
  • 2.3 Ensure 'forms authentication' require SSL - Not Enabled
  • 2.5 Ensure 'cookie protection mode' is configured for forms authentication - Not Enabled
  • 3.1 Ensure 'deployment method retail' is set
  • 3.10 Ensure global .NET trust level is configured
  • 3.4 Ensure IIS HTTP detailed errors are hidden from displaying remotely - Default
  • 3.8 Configure MachineKey Validation Method - .Net 3.5 - Default
  • 3.9 Ensure 'MachineKey validation method - .Net 4.5' is configured
Revision 1.6

Apr 23, 2020

Informational Update
  • 3.10 Ensure global .NET trust level is configured
Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.5

Aug 5, 2019

Informational Update
  • 3.10 Ensure global .NET trust level is configured
Miscellaneous
  • See also link updated.
Revision 1.4

May 21, 2019

Functional Update
  • 1.5 Ensure 'unique application pools' is set for sites
  • 1.6 Ensure 'application pool identity' is configured for anonymous user identity
  • 4.8 Ensure Handler is not granted Write and Script/Execute - Applications
  • 4.8 Ensure Handler is not granted Write and Script/Execute - Default
Informational Update
  • 3.10 Ensure global .NET trust level is configured
Miscellaneous
  • References updated.
Revision 1.3

Feb 11, 2019

Informational Update
  • 3.10 Ensure global .NET trust level is configured
Miscellaneous
  • Metadata updated.
  • References updated.