Overview
IIS Lockdown Wizard version 2.1 was released to help administrators and developers secure IIS 5.1, 5.0, and 4.0 servers. The lockdown is accomplished by turning off unnecessary features, thus reducing attack surface available to attackers.
To provide multiple layers of protection against attackers, URLscan 2.5 is included that allows users to specifically allow or deny specific types of requests made to their Web servers.
The IIS Lockdown Tool also comes with customizable templates for each supported server role, such as templates for Microsoft Exchange Outlook Web Access (OWA) and Application Servers.
To keep the server completely secure, however, all hotfixes are required before and after applying IIS Lockdown Wizard to stay protected against known security vulnerabilities.
Features
The primary feature offered by the IIS Lockdown Tool 2.1 is it's ability to help automate security tasks on supported IIS versions. The following are it's primary function:
- Locks down your IIS 4.0 & 5.x servers to ensure no features are enabled that are not desired
- Includes templates for enabling on a per-Application Server basis like Microsoft Exchange Server
- Offers included setup of URLScan 2.5
Benefits
This toolset is effective at locking down previous versions of IIS as long as the administrator uses the right templates and only enables what is necessary - and nothing more.
A familiarity with your current server environment and the Web applications on the server will help you successfully secure your IIS server.
IIS Lockdown provides the following benefits:
- Simple, easy-to-use, wizard to configure your IIS server
- Turns off unneeded features shipped as part of IIS
- Configures URLScan 2.5 to block requests not desired or needed for your Web Applications
- Easily supports customized templates for building a secure platform for your Web servers
Requirements
The IIS Lockdown Tool 2.1 supports the following Windows operating systems:
- Windows NT 4.0 Service Pack 4
- Windows 2000 Service Pack 4 (Server and Professional)
- Windows XP Service Pack 2