Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The IIS 8.5 private website must employ cryptographic mechanisms (TLS) and require client certificates.
Description
Discussion Text
TLS encryption is a required security setting for a private web server. Encryption of private information is essential to ensuring data confidentiality. If private information is not encrypted, it can be intercepted and easily read by an unauthorized party. A private web server must use a FIPS 140-2-approved TLS version, and all non-FIPS-approved SSL versions must be disabled.
NIST SP 800-52 specifies the preferred configurations for government systems.
NIST SP 800-52 specifies the preferred configurations for government systems.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.