Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Web-site logging must be enabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-2250 | WG240 IIS7 | SV-32636r2_rule | ECAT-1 ECAT-2 | Medium |
| Description |
|---|
| A major tool in exploring the web site use, attempted use, unusual conditions, and problems are reported in the access and error logs. In the event of a security incident, these logs can provide the SA and the web manager with valuable information. |
| STIG | Date |
|---|---|
| IIS 7.0 WEB SITE STIG | 2016-02-11 |
Details
| Check Text ( C-33496r1_chk ) |
|---|
| 1. Open the IIS Manager. 2. Click the site name. 3. Double-click Logging 4. Ensure logging is enabled. If logging is not enabled, this is a finding. |
| Fix Text (F-29196r1_fix) |
|---|
| 1. Open the IIS Manager. 2. Click the site name. 3. Double-click Logging. 4. Click the Enable option from the Action Pane, click apply. |