IIS Lockdown Tool
|
Microsoft has released an updated version of the Internet Information Services (IIS) Lockdown Tool 2.1, which provides templates for the major IIS-dependent Microsoft products. IIS Lockdown Tool functions by turning off unnecessary features, thereby reducing attack surface available to attackers. To provide in-depth defense or multiple layers of protection against attackers, URLscan, with customized templates for each supported server role, has been integrated into the IIS Lockdown Tool.
However, to help keep your server secure and to stay protected against known security vulnerabilities, all critical updates are required.
All of the default security-related configuration settings in IIS versions 6.0 and 7.0 meet or exceed the security configuration settings made by the IIS Lockdown tool. Therefore, you do not need to run this tool on Web servers running IIS version 6.0 or 7.0. However, if you are upgrading from a previous version of IIS, you should run the IIS Lockdown Tool before the upgrade to enhance the security of your Web server.
Here's what's new in IIS Lockdown Tool 2.1:
| • | Server roles. Version 2.1 is driven by supplied templates for the major IIS-dependent Microsoft products, including Microsoft Exchange Server 5.5 and Exchange 2000 Server, Microsoft Commerce Server, Microsoft BizTalk Server, Microsoft Small Business Server 4.5 and 2000, Microsoft SharePoint Portal Server, Microsoft FrontPage Server Extensions, and SharePoint Team Services. |
| • | URLscan integration, with customized templates for each supported server role. This integration enables the Lockdown Tool to provide additional security enforced by URLscan without requiring the administrator to design a custom URLscan filter for the particular server configuration and application. |
| • | Ability to remove or disable IIS services. Services such as HTTP, FTP, SMTP, and NNTP can be removed or disabled. |
| • | Support for Scripted or unattended installation. The tool can read from an answer file. |
| • | Redesigned user interface and fixes. In response to user feedback, the Lockdown Tool offers an improved user experience. |
