CYA Securing IIS 6.0

by Chris Peiris, Ken Schaefer, Bernard Cheah (Editor)

Overview

A highly portable, easily digestible road-map to configuring, maintaining and troubleshooting essential IIS 6.0 features.The book is organized around the 15 "MMCs" (Microsoft Management Consoles) that contain the configuration menus for the essential features. The options within each menu are explained clearly, potential problems are identified up-front, and configurations are subsequently presented in the aptly named "By the Book" section for that MMC. Readers will also appreciate the "Reality Check" sidebars througout, which present valuable cost/benefit analyses of situations where there is no single "right" answer.

Product Details

ISBN-13:	9781931836258
Publisher:	Elsevier Science
Publication date:	06/09/2004
Pages:	352
Product dimensions:	6.00(w) x 9.00(h) x (d)

Table of Contents

Coverage includes: Script Source Access, Information Disclosure, Denial of Service, Buffer Overflows, Directory Traversal, Cross-Site Scripting, Preparing the Operating System, Partitioning Hard Drives, Installing the OS, Preparing the File System, Installing IIS, Installing Hotfixes, Locking Down COM and Database Access, Securing Web Services, Running the IIS Lockdown Wizard, Securing IIS Global Settings, Securing the Default and Administration Web Sites, Disabling Internet Printing, Disabling or Securing the FrontPage Server Extensions, Configuring URLScan, Securing Web Sites, Building a Directory Structure, Setting Master WWW Properties, Securing by Content Type, Authenticating Users, Using Anonymous Authentication, Using Basic Authentication, Using Digest Authentication, Using Integrated Windows Authentication, Using Client Certificate Mapping, Publishing Web Content, Staging and Review, Setting File Attributes, Building File Checksums, Moving Content versus Updating Content, Summary, Solutions Fast Track, Frequently Asked Questions

Editorial Reviews

The Barnes & Noble Review
In Windows Server 2003, the IIS 6.0 web server is switched off by default, for security reasons. But if you’ve got to turn it on and use it, you’ve got some hardening to do. The fastest solution: Buy this book and do what it tells you.

Start by hardening Windows Server itself (including oft-neglected steps like protecting log files so crackers can’t hide). Learn how to install IIS with only the services you need; configure MIME types and IP address restrictions; set up SSL and authentication; secure FTP, NNTP, and POP3 or SMTP mail services, WebDAV, FrontPage extensions, and more.

With checklists throughout -- and “reality checks” that reveal some crucial gotchas -- this book will be pretty much indispensable to working IIS 6.0 administrators. Bill Camarda

Bill Camarda is a consultant, writer, and web/multimedia content developer. His 15 books include Special Edition Using Word 2003 and Upgrading & Fixing Networks for Dummies, Second Edition.

bn.com