Installing Internet Information Services

Internet Information Services (IIS) is installed as part of the operating system. However, some features required by UNICOM Intelligence might not be installed by default, so you must install them.

▪Web Server (IIS) > Web Server > Security > Windows Authentication: Required if Single Sign On (SSO) is to be used

▪Web Server (IIS) > Web Server > Application Development > ASP: Required for for ISAPI extensions

▪Web Server > Application Development > ASP.NET 4.5 (or higher): Required for ISAPI extensions

▪Web Server (IIS) > Web Server > Application Development > ISAPI extensions: Required for interviewing

▪Management Tools > IIS 6 Management Compatibility > IIS 6 Management Console: Required if an email relay is necessary. For more information, see article K34-1224 in the Knowledge Base at support.unicomsi.com.

▪NET Framework 4.5 (or higher) > WCF Services > HTTP Activation: Required for Interviewer synchronization

Note The Managed Pipeline Mode setting for the IIS application pool does not support Integrated mode; the Classic pipeline mode is still used in IIS 7.x.

▪IIS must be configured in order to ensure sensitive information is not exposed in response headers. For more information, see Adding interview engines to a UNICOM Intelligence Interviewer server, and the Microsoft support article, ‘Internet Information Server returns IP address in HTTP header (Content-Location)’: http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q218180.

▪Web-based Distributed Authoring and Versioning (WebDAV) is a collection of extensions that enable users to edit and manage files on remote servers.

If WebDAV is not required on your server, you must either disable it, or disallow unneeded HTTP methods (verbs), because of potential security issues. By default, the WebDAV service is disabled on the version of IIS that is deployed with UNICOM Intelligence products. To disable WebDAV, use the Internet Information Services (IIS) Manager.

If WebDAV is required on your server, use a tool UrlScan security tool to disallow the unneeded HTTP methods (verbs). For more information, see: http://technet.microsoft.com/en-us/security/cc242650.aspx.