Get your server issues fixed by our experts for a price starting at just 25 USD/Hour. Click here to register and open a ticket with us now!

Author Topic: IIS 7.0 Hardening Recomendations  (Read 3702 times)

0 Members and 1 Guest are viewing this topic.

nirmal

  • Jr. Member
  • **
  • Posts: 56
  • Karma: +0/-0
IIS 7.0 Hardening Recomendations
« on: November 17, 2013, 02:59:14 pm »
Hi all,

1) Disable default RDP port
To change the port that Remote Desktop listens on, follow these steps.
Start Registry Editor (Right click and "run as administrator")

Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TerminalServer\WinStations\RDP-Tcp\PortNumber
On the Edit menu, click Modify, and then click Decimal.

2) Disable Ping request

To enable ping to the Windows Server 2008 R2, follow below steps

Go to Start >> Administrative Tools >> Windows Firewall with advanced security >> Inbound Rules >> File and Printer Sharing (Echo Request - ICMPv4-IN) >> right click and select Enable Rule.

To disable the ping select Disable Rule in the last step.


3) Remove unnecessary user aacounts + secure user permission

4) Change default port  MSSQL

To change the Port Number, do the following steps.

1) Form start click on Microsoft SQl Server 2008\ Configuration Tools\ SQL Server Configuration Manager.

2) Expand SQl Server network Cofiguration\ Protocols for SQL2008

3) On your right hand Pane find "TCP/IP". you need to enable this protocol for using port number.

4) Double click the "TCP\IP" and go to tab "IP Address".
find "TCP PORT", which can be configured by the administrator.

Note: Changes can be in effect only after a restart of teh SQL Server Service.
How to ensure that SQL Server is using the set port number?
You can find this information from the sql Server Log. it should say SQL Server listing on a particular port number.


5) Disable SA USER and create another user with SA Privileges

6) Scan your system using Clamwin AntiVirus.

7) Setup Mod_Security

8) Setup Mod_Evasive

9) Audit File System and Audit Handle Manipulation

10) URL Scanning
Get your server issues fixed by our experts for a price starting at just 25 USD/Hour. Click here to register and open a ticket with us now!