| 1. Open the IIS Manager > Right click on the website being reviewed > Select Properties > Select the Web Site tab. |
2. Ensure Enable logging is selected.
3. Select the Properties button > Select the Advance tab.
4. Under the Extended logging options ensure the following items are checked:
Date, Time, Client IP Address, User Name, Method, URI Query, Http Protocol Status and Referrer
If the Enable logging checkbox is not selected, this is a finding.
If any of the items listed in step 4 are not selected, this is a finding.
NOTE: The collection of additional logging information is acceptable.