Forum Widgets
Latest Discussions
IIS hardening with CIS standards - tools and options
Hello IIS experts. Please suggest on best strategy for hardening on-prem IIS farm to CIS standards. I'm also interested in recurring audit of the results. There is a number of commercial products allowing to scan IIS for CIS Benchmarks. The latest "CIS Benchmark for Microsoft IIS 10" available to download in PDF format free of charge at https://www.cisecurity.org/cis-benchmarks/. However in this instance CIS does not offer "Build kit". Depends on product to be hardened, CIS "build kit" can be set of scripts, GPO policy or similar to allow rapid hardening deployment. Since there is no Official build kit I'm looking for alternatives. Can you please share your experience on this subject? I found few blogs but those are quite old.
How to Host a Rails App on IIS: Seeking a Simple Approach
Hello, I’m having trouble hosting my Rails app on IIS (Windows Server 2019). Unfortunately, I don’t have the option to choose a different server since the app will be hosted on an on-premise server, which also runs other applications on IIS (Windows Server 2019). I’ve read numerous discussions on this topic, and the most common feedback is that “it’s painful.” However, I haven’t been able to find a clear, step-by-step guide or solution. So far, I’ve come across the following options: Hosting with a reverse proxy Hosting with WSL Hosting with Docker However, I’m looking for a more traditional approach to hosting the app, similar to how one would typically host an application in other languages. As a developer with limited experience in server management, I’m not sure where to start. If anyone has any tips, tutorials, or guidance, I would greatly appreciate your help!
Temporary error 403 on images
I've been having the following problem for some time now. Some images are repeatedly not displayed on the website (error 403). These are also linked as an image. If I click on the link, they appear without any problems. When I refresh the page with cache turned off, different images are affected. Does anyone have an idea? for instance www.salzlandkreis.de/bildungkultur/ringheiligtum-poemmelte/impressionen http and https same behavior
IIS issue - apsnetcore.dll not found
Hi, I am working on upgrading a server from 2012 to 2022 (on AWS). I have installed a fresh 2022 instance and have sued webdeploy to copy the entire IIS configuration from the 2012 server to the 2022 server. To try to further bring the server up to date, the 2012 server is running .Net 2.x and on 2022 I have installed .Net 8.x When I launch the 2022 server IIS runs but my websites won't come up - I keep getting a 503 error. When I look in the Event Viewer the error message I see is "apsnetcore.dll not found". I have spent some time trying to identify how to rectify this but so far have not been successful. Could anyone please give me any suggestions to try to find a fix ? TIA
Chunked data through IIS
I am trying to chunk data through iis but it is not happning I tried <rewrite> <outboundRules> <!-- <rule name="Remove Content-Length" stopProcessing="false"> <match serverVariable="RESPONSE_Content-Length" pattern=".*" /> <action type="Rewrite" value="0" /> </rule> --> <!-- <rule name="Add Chunked Encoding" patternSyntax="ECMAScript"> <match serverVariable="RESPONSE_Transfer-Encoding" pattern=".*" /> <action type="Rewrite" value="chunked" /> </rule> --> and <rule name="Transfer-Encoding chunked"> <serverVariables> <set name="RESPONSE_Content-Length" value="" /> <set name="RESPONSE_Transfer-Encoding" value="chunked" /> </serverVariables> <action type="CustomResponse" statusCode="200" /> </rule> and <httpProtocol allowKeepAlive="false"> <customHeaders> <!-- <remove name="Content-Length" /> <add name="Transfer-Encoding" value="chunked" /> --> <add name="X-Content-Type-Options" value="nosniff" /> </customHeaders> </httpProtocol> in these cases in response header transfer-encoding is coming as chunked but response body is not comingIIS Logs have Incorrect Date Modified
I have a server that is creating daily IIS logs (stored local) with a timestamp in the Date Modified that have the incorrect date for the "current" log. Example: Today is 9-10-2024, the current log is named correctly(u_ex240910.log), has correct information inside, but the Date Modified Timestamp is 9-9-2024 7:00PM. There is also a log file for u_ex240909.log) which has correct information in it as well. I have dozens of IIS servers, and this is not an issue on the rest of them. The Logging feature in IIS Manager is setup identical on this issue server and working servers so I am stumped. Screenshot of "problem" server. Screenshot of "working" server: Screenshot of Logging setup in IIS Manager(which is identical on both trouble and working servers):
Calls from classic asp web pages to custom com+ soap web adaptor sequential/concurrent issue
Hi, I have a classic asp web site which uses a custom com+ app installed on the server to communicate with a custom soap web service. When I use the website installed on a Windows 10 Ent workstation running IIS 10 it behaves as needed, with separate web page hits making concurrent connections to the web service through the adaptor. However, when I use the site installed on a windows 2012R2 server running IIS 8.5 the actions from different web page hits are queueing and being processed sequentially. This is most noticeable when a series of actions are performed. eg If page hit (a) makes 5 sequential calls to the web service which might take a total of 60 seconds to complete, and then page hit (b) happens a few seconds after page hit (a), none of the actions from (b) are started until all 5 actions from (a) have completed. On the W10/IIs10 machine they are run concurrently. When I test using VBScript running under cscript.exe they run sequentially on both machines, so I am down to thinking that this is an IIS issue. Both instances of IIS and the com+ app are configured the same. The only difference I can see is that IIS Worker Processes info looks very different, with the "good machine" showing 8,412 Private Bytes and a very large 2,151,803,376.00 KB Virtual Bytes, and the "bad machine" showing 66,380.00KB Private and only 95,224 Virtual. The "bad" one has 64GB RAM and the good one only 16GB. This is very confusing because normally I would expect the server to perform better under load/multi-user conditions than the workstation, but this is the other way around. Any idea what may be causing the calls to be queued? Or perhaps it's not the com+ apps calls that are queued, it's just that subsequent pages not start processing until the previous page has finished waiting for a response?
