|
Microsoft has released an updated version of the Internet Information Services. (IIS) Lockdown Wizard 2.1, which provides templates for the major IIS-dependant Microsoft products. IIS Lockdown Wizard functions by turning off unnecessary features, thereby reducing attack surface available to attackers. To provide in-depth defense or multiple layers of protection against attackers, URLscan, with customized templates for each supported server role, has been integrated into the IIS Lockdown Wizard.
However, to help keep your server secure and to stay protected against known security vulnerabilities, all critical updates are required.
Here’s what’s new in IIS Lockdown Wizard 2.1:
• Server roles. Version 2.1 is driven by supplied templates for the major IIS-dependent Microsoft products, including Microsoft Exchange Server 5.5 and Exchange 2000 Server, Microsoft Commerce Server, Microsoft BizTalk® Server, Microsoft Small Business Server 4.5 and 2000, Microsoft SharePoint™ Portal Server, Microsoft FrontPage® Server Extensions, and SharePoint Team Services.
• URLscan integration, with customized templates for each supported server role. This integration enables the Lockdown Wizard to provide additional security enforced by URLscan without requiring the administrator to design a custom URLscan filter for the particular server configuration and application.
• Ability to remove or disable IIS services. Services such as HTTP, FTP, SMTP, and NNTP can be removed or disabled.
• Support for Scripted or unattended installation. The wizard can read from an answer file.
• Redesigned user interface and fixes. In response to user feedback, the Lockdown Wizard offers an improved user experience. |
