Timeline for Security Hardening in PaaS
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 26, 2019 at 9:21 | history | edited | Bas Lijten | CC BY-SA 4.0 |
updated with an example to explain how IIS manager changes apply to the web.config
|
| Mar 26, 2019 at 9:15 | comment | added | Bas Lijten | the hardening guide is for Sitecore general: as you can see, there are Azure Toolkit (ARM based deployments) and SIF deployment remarks over there. Although some mitigations are IIS specific (using IIS manager), they can be applied on every installation, as it makes instance (web.config) specific changes. I updated my answer for that specific remark. | |
| Mar 25, 2019 at 14:22 | comment | added | Alivor Tikos | This hardening guide is true for IAAS but if we are deploying in PAAS many of these don't hold true for example : IIS should be configured so that both “Script” and “Execute” permissions & disable upload watcher are some of security hardening activities which are not true for PAAS | |
| Mar 25, 2019 at 13:02 | history | answered | Bas Lijten | CC BY-SA 4.0 |