Designing IIS Security

Lesson 1: Design and Verify Transport Security

• Overview of IIS Security
• Overview SSL Certificates
• Best Practices of Configuring a Secure Web Server
• Import an Assigned Certificate
• Best Practices for Configuring SSL Certificate
• Associate a Certificate to a Web site
• Design SSL to support HTTPS
• Plan Request Filtering
• Design Security

Lesson 2: Design Authentication and Authorization

• Overview of Authentication and Authorization
• Define the Users and Groups
• Plan Access
• Define Application Restrictions in IIS 7.0
• Specify Authentication
• Specify Authorization
• Manage authentication

Lesson 3: Design Delegation Administration

• Overview of Delegated Administrative Rights
• Plan Delegated Administration
• Delegate Administration
• Overview of Feature Delegation

Lab: Designing IIS Security

• Exercise 1: Design and Verify Transport Security
• Exercise 2: Design and Verify Authentication and Authorization Methods
• Exercise 3: Design and Verify Delegation Administration
• Exercise 4: Configuring Authentication Types

….