ECE Chat Website IIS Best Practices

[Muhammed Ashiq]

Hi,

We are using ECE 12.0 (ES5) for chat and email.

Is there any documents available for Securing the Chat Web Servers in IIS level.

Your valuable input is highly appreciated.

[bill.king1]

Aside from the installation guide, you may find this link of use as well.

https://www.cisco.com/c/en/us/support/docs/contact-center/enterprise-chat-email/215325-troubleshoot-iis-web-server-configuratio.html

[Muhammed Ashiq]

Thanks Bill.

I found below also up on searching,

1. Ensuring that directory browsing is disabled may reduce the probability of disclosing sensitive content
   that is inadvertently accessible via IIS."
   To ensure that Directory Browsing is set do the following:
   %systemroot%\system32\inetsrv\appcmd set config /section:directoryBrowse /enabled:false
2. USE ONLY STRONG ENCRYPTION PROTOCOLS:
   Set as follows:
   SSL 3.0 Enabled: We have SSL disabled as part of the POODLE patch
   SSL 2.0 Disabled
   TLS 1.0 Enabled
   TLS 1.1 Enabled
   TLS 1.2 Enabled
   PCT 1.0 Disabled
3. DISABLE WEAK CIPHER SUITES
4. REMOVE MICROSOFT IIS START PAGE
5. Remove ASP.net from IIS header

[bill.king1]

It looks like there's now a Cisco documentation defect to address this as well.
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwc40486

[Muhammed Ashiq]

Thanks Bill. This would be a helpful document once published.