Summary

[Previous] [Next]

Internet Information Services 5 offers a number of new security features over its predecessor—most notably, integration with Windows 2000 Active Directory for Kerberos, User Principal Names, client certificate mapping, and new wizards to help solve common security scenarios.

To thoroughly understand IIS, you must understand Windows 2000 security because IIS is a Windows 2000 service that leverages the security capabilities of the operating system.

IIS offers a full range of authentication protocols, from anonymous access to high-trust protocols such as X.509 authentication and Kerberos. It also offers seamless access to ACLs and integrates Web-specific permission techniques in the form of Web permissions and IP/DNS restrictions. Privacy and integrity are offered by SSL/TLS. It's important to review the range of technologies available to you before embarking on creating your Web-based solution, and Internet Information Services is rich in security features.