Microsoft IIS for Windows 2000 and 2003

• What is Discovered and Monitored
• Event Types
• Configuration
• Settings for Access Credentials

What is Discovered and Monitored

Protocol	Information discovered	Metrics collected	Used for
SNMP	Application type	Process level metrics: CPU utilization, memory utilization	Performance Monitoring
WMI	Application type, service mappings	Process level metrics: uptime, CPU Utilization, Memory utilization, Read I/O, Write I/O IIS metrics: Current Connections, Max Connections, Sent Files, Received Files, Sent Bytes, Received Bytes, ISAPI Requests, Not Found Errors	Performance Monitoring
Windows Agent	Application type	W3C access logs: attributes include IIS Service Instance, Client IP, URL, User Agent, Referrer, HTTP Version, HTTP Method, HTTP Status Code, Sent Bytes, Received Bytes, Connection Duration	Security Monitoring and compliance

Event Types

In ADMIN > Device Support > Event Types, search for "microsoft iis" to see the event types associated with this device.

Configuration

• SNMP

• WMI

• FortiSIEM Windows Agent

SNMP

See SNMP Configurations in the Microsoft Windows Server Configuration section.

WMI

See WMI Configurations in the Microsoft Windows Server Configuration section.

FortiSIEM Windows Agent

For information on configuring IIS for FortiSIEM Windows Agent, see Collecting Windows IIS Logs from Microsoft Windows Server via Agents.

Settings for Access Credentials

See Setting Access Credentials in the Microsoft Windows Server Configuration section.