The web server must use a vendor-supported version of the web server software.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-2246	WG190 IIS7	SV-32635r2_rule		High

Description
Several vulnerabilities are associated with older versions of web server software. As hot fixes and patches are issued, these solutions are included in the next version of the server software. Maintaining the web server at a current version makes the efforts of a malicious user more difficult.

STIG	Date
IIS 7.0 Server STIG	2019-05-01

Details

Check Text ( C-32930r1_chk )
1. Open the IIS Manager. 2. Click Help, and select About Internet Information Services. 3. If the version is less than 7.0, this is a finding.

Fix Text (F-2295r5_fix)
Install the current version of the web server software and maintain appropriate service packs and patches.