Ensure 'deployment method retail' is set

СредњаНиво 1Аутоматскаiis

Опис

The <deployment retail> switch is intended for use by production IIS servers. This switch is used to help applications run with the best possible performance and least possible security information leakages by disabling the application's ability to generate trace output on a page, disabling the ability to display detailed error messages to end users, and disabling the debug switch. machine.config must contain <deployment retail="true" />. PowerShell 5.1 with the WebAdministration module; run elevated. CIS marks this recommendation Manual; the automated check implements its audit procedure.

Како се проверава

Метод провере: Команда љуске

shell

Import-Module WebAdministration -ErrorAction Stop; $c = Get-WebConfiguration -Filter 'system.web/deployment' -PSPath 'MACHINE'; if ($c.retail -eq $true) { 'compliant' } else { 'noncompliant' }

Очекивани излаз: compliant

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

In %windir%\Microsoft.NET\Framework64\<version>\Config\machine.config add <deployment retail="true" /> inside <system.web> (also in the 32-bit Framework copy).

Својства

Оперативни системи: Било који
Ознаке: iisaspnet
Референца: CIS Microsoft IIS 10 Benchmark v1.2.1 - 3.1 Ensure 'deployment method retail' is set

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target iis