DISA has released a STIG for IIS 7.0. You can find the STIG here:
I cracked open the .zip file and confirmed that there is guidance for both a site and a server.
Comments, recommended changes, and/or additions are due to DISA by 21 April 2011.
I'm glad that this STIG has been released, as I'm seeing more IIS 7.0 servers.
No comments:
Post a Comment