Return to doc.sitecore.com

  Tighten Server Security
Prev Next

If you wish you may at this time attempt to tighten security. However, be warned that obscure security settings will likely impact the operation of the site.

Generally, however, we do recommend that you disable all unused extensions in the IIS. For a Sitecore solution, you generally only need the .NET and perhaps ASP extensions.  Therefore, you can remove “.idc”, “.shtm”, etc. This will make your machine much more resistant to known attacks. This is illustrated below:


Prev Next