Shulou(Shulou.com)06/02 Report--

The purpose of this article is to share with you how to set up iis service on CVM. The editor thinks it is very practical, so I hope you can learn something after reading this article. Let's take a look at it with the editor.

IIS (Internet Information Server) is a favorite target for hackers. Therefore, for administrators who manage IIS web servers, it is very important to ensure the security of the servers.

1. Set up a NTFS disk drive specifically for IIS applications and data. If possible, IUSER (or whatever anonymous user) is not allowed to access any other disk drive.

two。 Use a software firewall to ensure that no end users (only developers) can access ports other than port 80 on the IIS machine.

3. Use Microsoft tools to protect machines: IIS Lockdown and UrlScan. Start the log file (logging) function that uses IIS. In addition to IIS records, the firewall log file function is also used, if possible.

4. Remove the recorded cloud server log (log) from the preset location and make sure that the backup has been made. Create a backup for the log folder so that there is always a backup file available in another location.

5. Start the Windows monitoring function (auditing) on the machine, because when you try to reverse trace the behavior of an attacker, you will always find insufficient data. Using the supervision log, you can check for any suspicious behavior by executing a script, and then send a report to the administrator.

6. Often read more safety articles. It's best to learn as much as you can about IIS and have comprehensive security settings, rather than just following the experience that others have told you.

7. Add the IIS vulnerability mailing list (mailing list) and do read it to keep abreast of the status. Such lists have X-Force Alerts and Advisories from Internet security systems.

8. Finally, make sure you run Windows Update regularly and double-check that the patch is really installed.

This is how the CVM sets up iis services. The editor believes that there are some knowledge points that we may see or use in our daily work. I hope you can learn more from this article. For more details, please follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.