Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. 7.19
  4. Install and Configure BlackBerry AtHoc
  5. IIS 10.0 Security Technology Implementation Guide
  6. Application STIG
  7. IIST-SI-000210: Produce log records containing sufficient information

IIST-SI-000210: Produce log records containing sufficient information

The IIS 10.0 website must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event.
To check compliance with IIST-SI-000210, complete the following steps for each site hosted on the IIS 10.0 web server:
  1. Open the IIS 10.0 Manager.
  2. Click the  IIS 10.0 web server.
  3. Under
    IIS
    , double-click the
    Logging
     icon.
  4. Under
    Log File
    , verify that the
    Format:
     option is configured to
    W3C
    .
  5. Click
    Fields
    .
  6. Under
    Standard Fields
    , verify that the following fields are configured:
    • Request Header >> Authorization
    • Response Header >> Content-Type
If either
Request Header >> Authorization
 or
Response Header >> Content-Type
 is not selected, your application is not compliant.
If your application is not compliant, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the website name.
  3. Under
    IIS
    , double-click the
    Logging
     icon.
  4. Under
    Log File
    , configure
    Format:
     under
    Log File
     to
    W3C
    .
  5. Click
    Fields
    .
  6. Under
    Custom Fields
    , select
    Request Header >> Authorization
    and
    Response Header >> Content-Type
    .
  7. Click
    OK
    .
  8. In the
    Actions
     pane, click
    Apply
    .