cya securing iis 6.0

Chris Peiris, Bernard Cheah , Ken Schaefer1-931836-12-4, 1-931836-24-8, 1-931836-25-6

Table of contents :
Team DDU……Page 1
Contents……Page 10
About the Book……Page 18
In this Chapter……Page 20
Increased Reliability and Availability……Page 21
Manageability Improvements……Page 22
Scalability and Performance Improvements……Page 24
Increased Security……Page 26
Services Provided by IIS 6 0……Page 29
Inetinfo exe Process and the IISAdmin Service……Page 31
IIS 6 0 Worker Process Isolation Mode……Page 33
IIS 5 0 Isolation Mode……Page 36
Your A** is Covered if You¡­……Page 38
In this Chapter……Page 40
Get Secure and Stay Secure……Page 41
Networking Environment……Page 42
Patches and Updates……Page 44
Windows Services……Page 47
User Accounts and Groups……Page 48
File System……Page 49
Auditing and Logging……Page 51
Staying Secure……Page 53
Secure IIS Checklist……Page 54
A Final Word on Security……Page 56
Your A** is Covered if You¡­……Page 57
In this Chapter……Page 58
Installing IIS 6 0 Using the Configure Your Server Wizard……Page 59
Installing or Modifying IIS 6 0 Using the Add/Remove Programs Control Panel……Page 63
Installing IIS 6 0 Using Automated Installation (Unattended Setup)……Page 68
Installing IIS 6 0 During the Windows 2003 Server Setup……Page 69
Installing IIS 6 0 After the Windows 2003 Server Setup……Page 73
Upgrading IIS 5 0 to IIS 6 0……Page 74
Post-Installation Information……Page 75
After Installation: Locating the Administrative Tools……Page 78
IIS Manager……Page 79
Application Server MMC……Page 80
Sharepoint Administration Website……Page 81
Your A** is Covered if You¡­……Page 83
In this Chapter……Page 84
Enabling and Disabling Web Service Extensions……Page 85
Configuring Multipurpose Internet Mail Exchange Types……Page 89
Configuring IP Address Restrictions……Page 94
Setting Website Permissions……Page 100
Securing Web Resources……Page 106
Enabling and Securing Web Access Log Files……Page 117
Your A** is Covered if You¡­……Page 133
In this Chapter……Page 134
Configuring Authentication……Page 135
The Authentication Process……Page 136
Configuring Anonymous Authentication……Page 137
Configuring Basic Authentication……Page 139
Configuring Digest Authentication……Page 141
Configuring Advanced Digest Authentication……Page 144
Configuring Integrated Windows Authentication……Page 145
Configuring UNC Authentication……Page 150
Configuring SubAuthentication……Page 151
Configuring Delegation……Page 152
Configuring IIS User Accounts……Page 154
IIS 6 0 Running in Worker Process Mode……Page 155
Changing the Process Identity of a Web Application Pool……Page 157
IIS 6 0 Running in IIS5 Isolation Mode……Page 158
IWAM_ Account……Page 160
Configuring URLScan……Page 161
Configuring URLScan ini……Page 162
Other Sections……Page 167
Configuring Your Server to Use SSL……Page 169
Generating a Certificate Request……Page 172
Submitting a Certificate Request……Page 175
Installing an Issued Certificate……Page 177
Managing your Website Certificates……Page 179
Configuring IIS SSL Options……Page 180
Configuring URL Authorization with the Authorization Manager……Page 182
Creating the Authorization Store……Page 183
Creating a New Application……Page 185
Creating an Operation……Page 186
Creating a Scope……Page 187
Creating a Role……Page 188
Configuring IIS 6 0……Page 191
Configuring Custom Error Messages……Page 194
The Default ASP Error Message……Page 195
Configuring a Basic ASP Error Message……Page 197
Configuring a Custom ASP Error Message……Page 198
Configuring a Custom ASP NET Error Message……Page 201
Securing Include Files……Page 203
Disabling Parent Paths……Page 206
Configuring IP Address,TCP Port and Host-Header combinations……Page 208
Your A** is Covered if You¡­……Page 211
In this Chapter……Page 214
Application Pools……Page 215
Configuring Application Pools……Page 217
Configuring Application Pool Identities……Page 219
Isolating Web Applications……Page 222
Understanding User Impersonation……Page 226
Your A** is Covered if You¡­……Page 228
In this Chapter……Page 230
Configuring FTP Sites……Page 231
Relocate the Default FTP Root Path……Page 232
Configure FTP Messages……Page 233
Securing FTP Resources……Page 235
Configuring FTP User Isolation……Page 240
Do Not Isolate Users……Page 241
Isolate Users……Page 242
Isolate Users Using Active Directory……Page 243
Securing the FTP Connection……Page 246
Enabling and Securing the FTP Access Log File……Page 251
Your A** is Covered if You¡­……Page 257
In This Chapter……Page 258
Configuring SMTP Virtual Servers……Page 259
Creating Additional SMTP Servers……Page 260
Configuring Additional Domains……Page 261
Configuring SMTP Server Folders……Page 263
Enable Logging……Page 265
Other Configuration Options……Page 268
SMTP Virtual Server Security……Page 271
Configuring Authentication……Page 272
Configuring Connection Controls……Page 273
Configuring Transport Layer Security……Page 275
Configuring Relay Controls……Page 276
Configuring and Securing the POP3 Server……Page 279
Initial Configuration……Page 281
Configuring Mailboxes……Page 284
Your A** is Covered if You¡­……Page 286
In this Chapter……Page 288
Configuring NNTP Virtual Servers……Page 289
Managing NNTP Newsgroups……Page 298
Securing NNTP Newsgroups……Page 306
Enabling and Securing NNTP Access Log Files……Page 315
Your A** is Covered if You¡­……Page 321
In this Chapter……Page 322
Understanding Certificate Services……Page 323
Certificate Authority and its Structure……Page 325
Configuring Your Certificate Authority……Page 327
Securing Certificate Services Web Enrollment Support……Page 336
Web Enrollment Virtual Directory Permissions……Page 337
Authenticating Web Enrollment……Page 338
Restricting Access to Protect your Web Enrollment……Page 339
Monitoring Certificate Services Web Enrollment Access……Page 342
Your A** is Covered if You¡­……Page 343
In This Chapter……Page 346
Installing and Enabling WebDAV……Page 347
Configuring and Securing WebDAV……Page 349
Configuring and Security FrontPage Server Extensions……Page 354
Installing FrontPage Server Extensions……Page 355
Enabling FPSE Authoring……Page 357
Securing your FPSE Virtual Host……Page 361
In this Chapter……Page 366
Configuring Internet Printing……Page 367
Securing Internet Printing……Page 373
Monitoring Internet Printing Access……Page 376
Your A** is Covered if You¡­……Page 378
In this Chapter……Page 380
Monitoring Site Activities Logging……Page 381
Monitoring Event Viewer Logging……Page 386
Monitoring HTTP API Error Logging……Page 392
Monitoring URLScan Logging……Page 399
Your A** is Covered if You¡­……Page 403
Index……Page 404