Disable the default page in IIS

Products

• Network Flow Analysis

Issue/Introduction

You need to disable the default page in IIS to resolve a vulnerability.

Environment

Any IIS Web Server

Resolution

In order to configure IIS server [IIS 7 and above] for disabling default page:

1. Start IIS manger:
   1. Go to run window
   2. Type “inetmgr”
   3. Click enter to open IIS web server in your windows system.
      
2. Select Default Document Option:
   1. Go under sites option in left side bar.
   2. Select Default Web Site.
   3. Click on “Default Document” option as shown in below screenshot.
      
3. Select Default.htm (Page to be disabled)
   1. Click the Default.htm page.
   2. Disable it from the Actions pane that appears on the right side
      .
4. Once Default.htm is disabled, it will result in 403 - Forbidden: Access is denied error, when accessing the default document. However, accessing NFA Console with ‘/ra’ will continue to work without any impact.