How to disable port 80 on IIS while keeping port 443 open?

16,613

enter image description here

In IIS, click your web site, then click Bindings and Remove the Port 80 entry, you must have the other entry for 443 before you can remove the one for Port 80.

Share:
16,613
user1385969
Author by

user1385969

Updated on June 28, 2022

Comments

  • user1385969
    user1385969 almost 2 years

    I have a potentially simple question, but after searching the forums could not find a clear answer:

    Per security finding, we need to disable port 80 on IIS (on Windows 2008 Enterprise, IIS 7.5) to make sure a potential intruder cannot connect to port 80 and is forced to use port 443 for SSL.

    The web application we have (vendor app written in .NET) does not use port 80 so it's safe to disable it.

    Do I just remove port 80 from the bindings setting? How can I easily disable port 80 on IIS?