Configure IIS 7.0 Web Server Security
IIS 7 allows you to create a very granular and precise security policy and configuration.
This is a double edged sword. On one hand, you’ll be very secure by creating what appears to be a least privilege environment with IIS 7, on the other hand, your security might be coming from a virtual denial of service condition for both your legitimate and illegitimate users.
What you need is a good guide on IIS 7 Web server security.
The good news is that we now have one. Check out this section of the Windows Server 2008 R2 documentation that gives you the information you need to understand and configure IIS 7 security:
http://technet.microsoft.com/en-us/library/cc731278.aspx
HTH,
Tom
Thomas W Shinder, M.D., MCSE
Sr. Consultant / Technical Writer
Prowess Consulting www.prowessconsulting.com
PROWESS CONSULTING | Microsoft Forefront Security Specialist
Email: tshinder@isaserver.org
MVP — Forefront Edge Security (ISA/TMG/IAG)
nsc Says:
June 12th, 2009 at 8:30 pm
It is probably no surprise to you that microsoft has a real problem developing products that run on microsoft products. I’ve been slaming my head (literaly) against my desk top trying to install forefront client security server. The documentation leaves much to be desired. It amounts to little more than promoting the product name. Is there a step by step instillation that actually has relivant information. You know like this is 2009 not 2005.
Please help.