Web server security configuration (with security tool download)

WEB security is one of the most common services provided by the system. The main vulnerabilities of WEB security servers include:
Physical path Leakage
CGI Source Code Leakage
Directory Traversal
Execute any command
Buffer Overflow
Denial of Service
Cross-Site lactic acid execution
The WEB server software used on Windows is IIS. No matter which operating system platform, as long as the WEB service is provided externally, it may face attacks from outside, therefore, it is necessary to provide effective security protection for WEB servers.
Some effective measures taken for WEB servers include:
A. Patch
For IIS system vulnerabilities, you should regularly download security patches to detect and block vulnerabilities in a timely manner.
B. only open the WEB Service port
If you do not need other services, choose to install only the WEB service and use port 80 to disable other unnecessary services, such as FTP and SMTP services.
C. The WEB server should be placed in a special area. Using the firewall to protect the WEB server, this tool can effectively detect existing problems and actively configure them.

Web service configuration tool