Learn to delete unnecessary IIS extension mappings

We know that IIS 6.0 is now a widely used Web platform, and creating a site based on IIS 6.0 is the first choice for many enterprises. However, IIS has higher hardware requirements than other Web platforms, and its performance is not satisfactory. Therefore, we need to learn how to optimize IIS and delete unnecessary IIS extension mappings.

By default, IIS supports ing between. asp,. cdx, and other eight types of IIS extensions, which are rarely used except. asp extensions. These unnecessary extensions will increase the burden on web servers and bring some security risks.

For example, IIS extensions such as. asa and. cer can be exploited by attackers to obtain webshells. Generally, asp system restricts the upload of asp files. asa or. cer and other IIS extensions, attackers can change the file suffix to break through the upload restrictions and run. asa or. cer file to obtain webshell. (Figure)

To delete an IIS extension, click confirm,. shtm, And. stm, and then click Delete. (Figure)