0

IIS6 had some tools for hardening, against attacks and holes.

Does IIS7 have the same?

If not, are there some standard thingst that should be done to protect it?

Improve this question

2 Answers 2

Reset to default
3

IIS 7 is much more secure out of the box, operating off of an "opt-in" model for features rather than opt-out as with previous versions. In order to read up on hardening IIS 7 however, you will want to download the Windows Server 2008 Security Guide (the actual file you want is Security Compliance Management Toolkit _ Windows Server 2008.zip). Chapter 6 covers Hardening Web Services (aka IIS 7).

Improve this answer
0

You can also look at the Security Configuration Wizard found under the administrative tools within Windows Server 2008, although much of it won't do you a lot of good without a greater understanding of the potential holes, the wizard will still walk you through closing down certain ports and shutting down miscellaneous running services.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .