IIS系统加固规范 2013 年 3 月 目 录 1 账号管理、认证授权 .................................................................................................. 1 1.1.1 S HG-IIS -01-01-01 ............................................................................................ 1 1.1.2 S HG-IIS -01-01-02 ............................................................................................ 2 1.1.3 S HG-IIS -01-01-03 ............................................................................................ 2 1.1.4 S HG-IIS -01-01-04 ............................................................................................ 4 2 日志配置 ...................................................................................................................... 5 2.1.1 S HG-IIS -02-01-01 ............................................................................................ 5 2.1.2 S HG-IIS -02-01-02 ............................................................................................ 6 2.1.3 S HG-IIS -02-01-03 ............................................................................................ 7 3 通信协议 ...................................................................................................................... 8 3.1.1 S HG-IIS -03-01-01 ............................................................................................ 8 4 设备其他安全要求 .................................................................................................... 1 0 4.1.1 S HG-IIS -04-01-01 .......................................................................................... 10 4.1.2 S HG-IIS -04-01-02 .......................................................................................... 13 4.1.3 S HG-IIS -04-01-03 .......................................................................................... 14 4.1.4 S HG-IIS -04-01-04 ...................