Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
55 rules foundof 11,219Page 2 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-IIS-3.4 | Ensure IIS HTTP detailed errors are hidden from displaying remotelyiis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-3.7 | Ensure 'cookies' are set with HttpOnly attributeiis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-3.9 | Ensure 'MachineKey validation method - .Net 4.5' is configurediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-3.10 | Ensure global .NET trust level is configurediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-4.5 | Ensure Double-Encoded requests will be rejectediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-4.6 | Ensure 'HTTP Trace Method' is disablediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-4.7 | Ensure Unlisted File Extensions are not allowediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-4.11 | Ensure 'Dynamic IP Address Restrictions' is enablediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-5.1 | Ensure Default IIS web log location is movediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-5.2 | Ensure Advanced IIS logging is enablediis · Level 1 | iis | Medium | 1 | Manual review |
| TMA-IIS-5.3 | Ensure 'ETW Logging' is enablediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-6.2 | Ensure FTP Logon attempt restrictions is enablediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-7.6 | Ensure TLS 1.2 is Enablediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-7.10 | Ensure AES 128/128 Cipher Suite is Disablediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-7.11 | Ensure AES 256/256 Cipher Suite is Enablediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-2.4 | Ensure 'forms authentication' is set to use cookiesiis · Level 2 | iis | Low | 2 | Automated |
| TMA-IIS-2.8 | Ensure 'credentials' are not stored in configuration filesiis · Level 2 | iis | Low | 2 | Automated |
| TMA-IIS-3.2 | Ensure 'debug' is turned offiis · Level 2 | iis | Low | 2 | Automated |
| TMA-IIS-3.3 | Ensure custom error messages are not offiis · Level 2 | iis | Low | 2 | Automated |
| TMA-IIS-3.5 | Ensure ASP.NET stack tracing is not enablediis · Level 2 | iis | Low | 2 | Automated |
| TMA-IIS-3.6 | Ensure 'httpcookie' mode is configured for session stateiis · Level 2 | iis | Low | 2 | Automated |
| TMA-IIS-3.8 | Ensure 'MachineKey validation method - .Net 3.5' is configurediis · Level 2 | iis | Low | 2 | Manual review |
| TMA-IIS-3.11 | Ensure X-Powered-By Header is removediis · Level 2 | iis | Low | 2 | Automated |
| TMA-IIS-3.12 | Ensure Server Header is removediis · Level 2 | iis | Low | 2 | Automated |
| TMA-IIS-4.1 | Ensure 'maxAllowedContentLength' is configurediis · Level 2 | iis | Low | 2 | Manual review |