Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry AtHoc
  3. 7.19
  4. Install and Configure BlackBerry AtHoc
  5. IIS 10.0 Security Technology Implementation Guide
  6. Server STIG
  7. IIST-SV-000115: Protect log information

IIST-SV-000115: Protect log information

The log information from the IIS 10.0 web server must be protected from unauthorized modification or deletion.
To check compliance with IIST-SV-000115, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 web server name.
  3. Click the
    Logging
     icon.
  4. Click
    Browse
     and then navigate to the directory where the log files are stored.
  5. Right-click the log file directory and select
    Properties
    .
  6. Click the
    Security
     tab.
  7. Verify the log file access is restricted to
    System - Full Control
     and
    Administrators - Full Control
    .
If the log file restrictions are not set to
System - Full Control
 and
Administrators - Full Control
, your server is not compliant.
If your server is not compliant, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 web server name.
  3. Click the
    Logging
     icon.
  4. Click
    Browse
     and then navigate to the directory where the log files are stored.
  5. Right-click the log file directory and select
    Properties
    .
  6. Click the
    Security
     tab.
  7. Set the log file permissions to
    System - Full Control
     and
    Administrators - Full Control
    .
  8. Click
    OK
    .
  9. In the
    Actions
     pane, click
    Apply
    .