Microsoft's Web Server Security

We discussed the IIS specific security issues, including Web server permissions, IP restrictions, client certificate mapping and SSL.