Microsoft IIS Policy

The operational best practices policy for Microsoft's IIS v6 web server focuses on establishing a solid performance tuning baseline. The configuration setting tests included in this policy use recommended real-world values and cover critical performance areas including CPU usage, memory management, network performance, HTTP compression and ASP.NET application settings. These values may require customization based on how IIS is utilized in a specific environment and according to enterprise-specific information security policies.

The source of this operational/best practices policy information is through collaboration with subject matter experts (SMEs) in the area of Microsoft IIS web server configuration. Tripwire worked with SMEs who specialize in evaluating, implementing, and managing IT solutions. Consultants who have worked extensively with Microsoft's Server products and the .NET development platform, and have managed environments that support thousands of virtual machines.