Security Technical Implementation Guides (STIGs)

Vulnerability ID	Severity	Description
V-218824	Medium	Unspecified file extensions on a production IIS 10.0 web server must be removed
V-218825	Medium	The IIS 10.0 web server must have a global authorization rule configured to restrict access
V-218827	Low	The IIS 10.0 web server must enable HTTP Strict Transport Security (HSTS)