Applying STIG IIS Recommendations

Products

• Carbon Black App Control

Issue/Introduction

Applying STIG Recommendations to the application server, such as IIST-SV-000151 or IIST-SI-000220.

Environment

• Microsoft IIS: All Supported Versions
• App Control Console: All Supported Versions

Resolution

Modifications to IIS for hardening or otherwise modifying/securing the IIS Application Pools running the App Control Console is not supported.

• In some instances, applying the changes may result in the Console being unavailable.
• Backups, snapshots, etcetera should be taken before attempting any changes.
• All changes should be thoroughly tested and on Server upgrade there is possibility for either unknown failures or reversions in changes.

Additional Information

• While the Default Values mentioned here have not been seen to cause any issues, no official testing or guarantees are available.
• Make sure to test after any modification or changes extensively.