- WA000-WI030 IIS6 - The IUSR_machinename account must not have read access to the .inc files or their equivalent. - '.asa'
- WA000-WI030 IIS6 - The IUSR_machinename account must not have read access to the .inc files or their equivalent. - '.asax'
- WA000-WI030 IIS6 - The IUSR_machinename account must not have read access to the .inc files or their equivalent. - '.inc file permissions'
- WA000-WI030 IIS6 - The IUSR_machinename account must not have read access to the .inc files or their equivalent. - '.inc'
- WA000-WI030 IIS6 - The IUSR_machinename account must not have read access to the .inc files or their equivalent. - 'global.asa'
- WA000-WI030 IIS6 - The IUSR_machinename account must not have read access to the .inc files or their equivalent. - 'global.asax'
- WA000-WI050 IIS6 - Unused and vulnerable script mappings in IIS 6 must be removed. - '.bat mappings'
- WA000-WI050 IIS6 - Unused and vulnerable script mappings in IIS 6 must be removed. - '.cmd mappings'
- WA000-WI050 IIS6 - Unused and vulnerable script mappings in IIS 6 must be removed. - '.HTR scripting Disallowed'
- WA000-WI050 IIS6 - Unused and vulnerable script mappings in IIS 6 must be removed. - 'Allowed Web Service Extensions'
- WA000-WI050 IIS6 - Unused and vulnerable script mappings in IIS 6 must be removed. - 'Index Server Web Interface Disallowed'
- WA000-WI050 IIS6 - Unused and vulnerable script mappings in IIS 6 must be removed. - 'Internet Data Connector Disallowed'
- WA000-WI050 IIS6 - Unused and vulnerable script mappings in IIS 6 must be removed. - 'Server Side Includes Disallowed'
- WA000-WI070 IIS6 - Indexing Services must only index web content.
- WA000-WI090 IIS6 - Directory browsing must be disabled.
- WA000-WI092 IIS6 - The IIS web site permissions 'Write' or 'Script Source' must not be selected. - 'Script Source permission check'
- WA000-WI092 IIS6 - The IIS web site permissions 'Write' or 'Script Source' must not be selected. - 'Write permission check'
- WA000-WI120 IIS6 - The Content Location header must not contain proprietary IP addresses.
- WA000-WI6010 IIS6 - The web site must have a unique application pool.
- WA000-WI6020 IIS6 - The Recycle Worker processes in minutes monitor must be set properly.
- WA000-WI6022 IIS6 - The maximum number of requests an application pool can process must be set.
- WA000-WI6024 IIS6 - The maximum virtual memory monitor must be enabled.
- WA000-WI6026 IIS6 - The maximum used memory monitor must be enabled.
- WA000-WI6028 IIS6 - The Shutdown worker processes Idle Timeout monitor must be enabled.
- WA000-WI6030 IIS6 - The Limit the kernel request queue monitor must be enabled
- WA000-WI6032 IIS6 - The Enable pinging monitor must be enabled. - 'PingingEnabled set to True'
- WA000-WI6032 IIS6 - The Enable pinging monitor must be enabled. - 'PingInterval set to 30 or more'
- WA000-WI6034 IIS6 - The Enable rapid-fail protection monitor must be enabled.
- WA000-WI6036 IIS6 - The Enable rapid-fail time period monitor must be enabled.
- WA000-WI6040 IIS6 - A unique non-privileged account must be used to run Worker Process Identities. - 'AppPoolIdentityType = 3 - WAMUserName'