Microsoft introduces IIS lockdown tool
Friday, August 24, 2001 by mcs2k1 | Discussion: WinCustomize News
Microsoft has released a new security tool that makes it simple to secure an IIS 4.0 or 5.0 web server. The tool, known as the IIS Lockdown Tool, allows web servers to quickly and easily be put into the right configuration – in which the server provides all of the services the administrator wants to provide, and no others. Customers can use this tool to instantly protect their systems against security threats that target web servers.
The tool offers two operating modes. The default is Express Lockdown which, with a single mouse click, configures the server in a highly secure way that is appropriate for most basic web servers. For administrators who want to pick and choose the technologies that will be enabled on the server, the tool offers an Advanced Lockdown mode. A comprehensive help system provides information and recommendations for selecting the best configuration, and an undo facility allows the most recent lockdown to be reversed.
Wondering whether it’s worth the time to use the tool? Consider this: a web server configured using the Express Lockdown would be completely protected against Code Red and virtually all known security vulnerabilities affecting IIS 4.0 and 5.0 – even without the patches for these vulnerabilities. We do, of course, recommend that all customers, even those running locked-down servers, continue to stay current on all security patches, but this vividly illustrates the value of the tool.
Requirements: Windows NT 4.0 running IIS 4.0 or Windows 2000 running IIS 5.0
The tool offers two operating modes. The default is Express Lockdown which, with a single mouse click, configures the server in a highly secure way that is appropriate for most basic web servers. For administrators who want to pick and choose the technologies that will be enabled on the server, the tool offers an Advanced Lockdown mode. A comprehensive help system provides information and recommendations for selecting the best configuration, and an undo facility allows the most recent lockdown to be reversed.
Wondering whether it’s worth the time to use the tool? Consider this: a web server configured using the Express Lockdown would be completely protected against Code Red and virtually all known security vulnerabilities affecting IIS 4.0 and 5.0 – even without the patches for these vulnerabilities. We do, of course, recommend that all customers, even those running locked-down servers, continue to stay current on all security patches, but this vividly illustrates the value of the tool.
Requirements: Windows NT 4.0 running IIS 4.0 or Windows 2000 running IIS 5.0
cyber-vic
Reply #2 Wednesday, August 29, 2001 10:32 AM
Reply #2 Wednesday, August 29, 2001 10:32 AM
Have my iis running from d-drive, this lock down bomb's out.Looks on c-drive.
cyber-vic
Reply #3 Wednesday, August 29, 2001 10:34 AM
Reply #3 Wednesday, August 29, 2001 10:34 AM
Have my iis running from d-drive, this lock down bomb's out.Looks on c-drive.If any body has suggestions please e-mail [email protected]
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
Reply #1 Friday, August 24, 2001 4:08 PM