RE: Locking down IIS

From: Douglas Gullett (dougg03@home.com)
Date: 12/21/01 

From: "Douglas Gullett" <dougg03@home.com>
To: <security-basics@securityfocus.com>
Date: Fri, 21 Dec 2001 14:41:40 -0500

Well, that would be a start, but Microsoft has a habit of suggesting the
"whitewash" method of security..."let's pretend there is nothing wrong"!

I would suggest http://www.cert.org/

They have plenty of information on securing your computer. Also a less
biased viewpoint!

Happy New Year!

Doug G

> -----Original Message-----
> From: David Carter [mailto:dave_carter827@hotmail.com]
> Sent: Friday, December 21, 2001 8:36 AM
> To: jamesk@ashlandagency.com; security-basics@securityfocus.com
> Subject: Re: Locking down IIS
>
>
> Look at the vendors site. http://www.microsoft.com/security . Microsoft
> has alot of White Papers on how to and best practices for
> securing W2K and
> IIS.
>
> Dave
>
>
> >From: "James Kelty" <jamesk@ashlandagency.com>
> >To: <security-basics@securityfocus.com>
> >Subject: Locking down IIS
> >Date: Thu, 20 Dec 2001 09:10:38 -0800
> >
> >Hello!
> >
> >I was wondering if someone could point me in the right direction
> to books,
> >and or web sites that will lay out the best way to lock down,
> bastionize, a
> >win2k/IIS 5.0 server. Thanks!
> >
> >-James
> >
> >
>
>
>
>
> _________________________________________________________________
> Send and receive Hotmail on your mobile device: http://mobile.msn.com
>

Relevant Pages

  • Re: IIS log entries
    ... > Probably an obvious and basic question, but I've got IIS running on W2K ... looks like just worms and/or script kiddies. ... if your web server isn't completely secured and ready for prime ... More info in the securing checklists at the URL listed ...
    (microsoft.public.inetserver.iis.security)
  • Re: Windows Server 2K Lockdown
    ... > I am looking for some documentation on locking down W2K, ... > limited to IIS.. ... Any information related to polciy etc would be great ...
    (Focus-Microsoft)
  • RE: Securing ASP.NET for Hosting
    ... overview of how IIS, Windows, and .NET work together. ... geared towards developers or focuses on securing access to the components. ... > asp.net in a hosting environment? ...
    (Focus-Microsoft)
  • Windows Server 2K Lockdown
    ... I am looking for some documentation on locking down W2K, ... to IIS.. ... Any information related to polciy etc would be great as well.. ...
    (Focus-Microsoft)
  • Re: IIS on each developers machine
    ... > Do we have some document on msdn for securing the machines (with IIS) ... Tom Porterfield ...
    (microsoft.public.dotnet.general)