- DarkLight
Security Configurations
- DarkLight
Perform the following manual configuration:
ETag Removal
The following URL Rewrite outbound rule removes the ETag from the response header. This manual configuration depends on the URL Rewrite application being enabled in IIS.
Web.config
<system.webServer>
<rewrite>
<outboundRules>
<rule name="Remove ETag">
<match serverVariable="RESPONSE_ETag" pattern=".+" />
<action type="Rewrite" />
</rule>
</outboundRules>
</rewrite>
</system.webServer>
IIS Default Page Disclosed
The Error Page can be designated as the default page for the IIS Default Website. The following files are accessible within the LCMConsole application and can be copied to the root directory of the Default WebSite.
LCMConsole > error.htm to DefaultWebSite>error.htm
LCMConsole > img > error.png to DefaultWebSite> > img > error.png
Web.config
<system.webServer>
<defaultDocument enabled="true">
<files>
</files>
</defaultDocument>
</system.webServer>
Error Page Configuration
The error page is set to the IIS Default Website to display when attempting to access unauthorized or unavailable resources. The following files from the LCMConsole application are available for copying to the root directory of the Default Website:
LCMConsole > error.htm to DefaultWebSite>error.htm
LCMConsole > img > error.png to DefaultWebSite> > img > error.png
Web.config
<system.web>
<customErrors mode="On">
<error statusCode="500" redirect="error.htm?code=500" />
<error statusCode="503" redirect="error.htm?code=503" />
<error statusCode="400" redirect="error.htm?code=400" />
<error statusCode="403" redirect="error.htm?code=403" />
<error statusCode="404" redirect="error.htm?code=404" />
<error statusCode="401" redirect="error.htm?code=401" />
<error statusCode="402" redirect="error.htm?code=402" />
<error statusCode="405" redirect="error.htm?code=405" />
<error statusCode="406" redirect="error.htm?code=406" />
<error statusCode="412" redirect="error.htm?code=412" />
<error statusCode="502" redirect="error.htm?code=502" />
<error statusCode="501" redirect="error.htm?code=501" />
</customErrors>
</system.web>