Cisco Cisco TelePresence Management Suite (TMS) Version 15 Installation Guide
Appendixes
Appendix 1: Restricting IIS modules to minimal required
IIS offers a modular system that allows an administrator to fine tune what components are installed and
enabled on their server for the greatest security. To assist administrators who wish to further restrict their
servers, the following list documents which modules are required for Cisco TMS. Modules may be controlled
at either the site or server level (some are server level only) . The steps below assume that you are making
changes at the server level.
enabled on their server for the greatest security. To assist administrators who wish to further restrict their
servers, the following list documents which modules are required for Cisco TMS. Modules may be controlled
at either the site or server level (some are server level only) . The steps below assume that you are making
changes at the server level.
Before removing modules, we recommend backing up your IIS configuration by using the command
%windir%\system32\inetsrv\appcmd.exe add backup "TMS".
%windir%\system32\inetsrv\appcmd.exe add backup "TMS".
To restore the backup later if needed, use the command %windir%\system32\inetsrv\appcmd.exe
restore backup "TMS"
restore backup "TMS"
To modify which modules are enabled in IIS:
1. Open the
Internet Information Services (IIS) Manager
.
2. From the tree in the left section, click on your server’s name.
3. In the center section, under IIS, double-click Modules.
The list of installed Managed and Native Modules is displayed.
4. To remove a module, right-click the entry, or select the entry and go to the
Actions
panel, then select
Remove.
The following modules are required for Cisco TMS and must not be removed:
n
AnonymousAuthenticationModule
n
BasicAuthenticationModule
n
DefaultDocumentModule
n
DefaultAuthentication
n
DigestAuthenticationModule
n
HttpCacheModule
n
HttpLoggingModule (recommended)
n
HttprRedirectionModule
n
IsapiFilterModule
n
ProtocolSupportModule
n
RequestFilteringModule
n
Session
n
StaticCompressionModule
n
StaticFileModule
n
WindowsAuthentication
n
WindowsAuthenticationModule
Appendix 2: Configuring IIS request flood protection
To ensure Cisco TMS stability and protect against flooding in the event of very high numbers of concurrent
incoming requests from systems, we recommend configuring IIS flood protection on your server.
incoming requests from systems, we recommend configuring IIS flood protection on your server.
Cisco TelePresence Management Suite Installation and Upgrade Guide (14.4.1)
Page 49 of 55
Appendixes