CIS Logo
tagline: Confidence in the Connected World
Young woman working on a computer

Securing Microsoft IIS An objective, consensus-driven security guideline for the Microsoft IIS Server Software.

An objective, consensus-driven security guideline for the Microsoft IIS Server Software.

A step-by-step checklist to secure Microsoft IIS:

For Microsoft IIS 10 (CIS Microsoft IIS 10 Benchmark version 1.0.0)

CIS has worked with the community since 2009 to publish a benchmark for Microsoft IIS

Join the Microsoft IIS community Arrow

Other CIS Benchmark versions:

For Microsoft IIS (CIS Microsoft IIS 7 Benchmark version 1.7.1)

Complete CIS Benchmark Archive Arrow

Arrow CIS Covers Other Server Technologies

See the full list

Information Hub : CIS Microsoft IIS Benchmarks

Ticket • 09 Nov 2018

Disable WebDav Module

Join the Discussion Arrow

Discussion • 07 Nov 2018

Inquiry about IIS 10 benchmark 3.1

Join the Discussion Arrow

Ticket • 01 Nov 2018

REMOVE - IIS 7/IIS 8 clause 7.11 and IIS 10 clause 7.10, they recommend to “Ensure Triple DES Cipher Suite is Disabled (Scored)”

Join the Discussion Arrow

Ticket • 01 Nov 2018

UPDATE - 5.2 Ensure Advanced IIS logging is enabled

Join the Discussion Arrow