Remediation Steps

Follow the steps below to remediate this finding on Microsoft IIS webserver.

1. Open IIS Manager and select the site or virtual directory.

2. Double-click Directory Browsing in the Features pane.

3. In the Actions pane on the right, click Disable.

4. Alternatively, in web.config:

   <system.webServer>
   <directoryBrowse enabled="false" />
   </system.webServer>