Web Directory

» Enabling SSL in IIS on Windows XP Professional
   This article describes steps one may take to create a test certificate that allows one to enable SSL on IIS under Windows XP Professional.
   http://www.somacon.com/p41.php

» IIS 5.0 Baseline Security Checklist
   Recommendations and best practices to secure a server on the Web running Microsoft Windows 2000 and Internet Information Services (IIS) 5.
   http://technet.microsoft.com/en-us/library/cc750569.aspx

» IIS Lockdown Wizard
   Software works by turning off unnecessary features thereby reducing attack surface available to attackers.
   http://www.microsoft.com/technet/security/tools/locktool.mspx

» Manage Security of Your Windows IIS Web Services
   Microsoft Consulting Services web server best practices.
   http://www.microsoft.com/technet/Security/bestprac/mcswebbp.mspx

» Urlscan Security Tool
   Urlscan is a powerful security tool that works in conjunction with the IIS Lockdown Tool to give IIS Web site administrators the ability to turn off unneeded features and restrict the kind of HTTP requests that the server will process.
   http://www.microsoft.com/technet/security/tools/urlscan.mspx