On Windows 2000 platforms, you may choose to run the IIS Lockdown Tool on your DCA/IIS server. The IIS Lockdown Tool is a wizard which reduces IIS's vulnerability to virus attack by turning off unnecessary IIS features. It is available at: http://www.microsoft.com/windows2000/downloads/recommended/iislockdown/default.asp.
The IIS Lockdown Tool should be run only AFTER the DCA has been installed on your server. If the Lockdown Tool has already been run, you must uninstall it prior to installing the DCA. Failure to first remove the Lockdown Tool will prevent the DCA from installing properly.
After the DCA is installed, you can reinstall the Lockdown Tool using the settings described below.
Note: The information in this guide is based on the Lockdown Tool, version 2.1. For information on subsequent versions, consult your Cisco representative.
To detect whether the Lockdown Tool was previously run on your server, check the DCA\System32\inetsrv directory for the presence of files named oblt-rep.log and/or oblt-log.log. The presence of either of these files indicates that the Lockdown Tool has been run.
If necessary, uninstall the Lockdown Tool by running it a second time. Running the Lockdown Tool wizard over a current installation causes it to uninstall. When run over a current installation, the wizard displays a message asking you to confirm the uninstall. If instead of this message the wizard displays a license agreement, the previous installation has already been removed.
When you install the Lockdown Tool, you are prompted to select a template that most closely matches the role of your server. Select the PROXY SERVER template. This template automatically uses the settings required by the DCA. Specifically, these include:
Services: Web Service (HTTP) enabled.
File Permissions for Anonymous Users: Writing to content directories enabled.
Virtual Directories: Scripts directory enabled.
URL Scan Filter: Not installed.
See Also
For related information, see:
About DCA Software Requirements
About Installation Troubleshooting
The DCA Administration and Configuration Guide