Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
55 rules foundof 8,597Page 1 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-IIS-1.4 | Ensure 'application pool identity' is configured for all application poolsiis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-2.6 | Ensure transport layer security for 'basic authentication' is configurediis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-2.7 | Ensure 'passwordFormat' is not set to cleariis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-4.8 | Ensure Handler is not granted Write and Script/Executeiis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-4.9 | Ensure 'notListedIsapisAllowed' is set to falseiis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-4.10 | Ensure 'notListedCgisAllowed' is set to falseiis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-6.1 | Ensure FTP requests are encryptediis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-7.2 | Ensure SSLv2 is Disablediis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-7.3 | Ensure SSLv3 is Disablediis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-7.4 | Ensure TLS 1.0 is Disablediis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-7.5 | Ensure TLS 1.1 is Disablediis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-7.7 | Ensure NULL Cipher Suites is Disablediis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-7.8 | Ensure DES Cipher Suites is Disablediis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-7.9 | Ensure RC4 Cipher Suites is Disablediis · Level 1 | iis | High | 1 | Automated |
| TMA-IIS-1.1 | Ensure 'Web content' is on non-system partitioniis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-1.2 | Ensure 'Host headers' are on all sitesiis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-1.3 | Ensure 'Directory browsing' is set to Disablediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-1.5 | Ensure 'unique application pools' is set for sitesiis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-1.6 | Ensure 'application pool identity' is configured for anonymous user identityiis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-1.7 | Ensure' WebDav' feature is disablediis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-2.1 | Ensure 'global authorization rule' is set to restrict accessiis · Level 1 | iis | Medium | 1 | Manual review |
| TMA-IIS-2.2 | Ensure access to sensitive site features is restricted to authenticated principals onlyiis · Level 1 | iis | Medium | 1 | Manual review |
| TMA-IIS-2.3 | Ensure 'forms authentication' require SSLiis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-2.5 | Ensure 'cookie protection mode' is configured for forms authenticationiis · Level 1 | iis | Medium | 1 | Automated |
| TMA-IIS-3.1 | Ensure 'deployment method retail' is setiis · Level 1 | iis | Medium | 1 | Automated |