Verification checklist

Use the following check list to ensure that all of the following items exist and are configured as described:

√	Item	Description
	ISAPI and CGI Extensions	IIS 7: ISAPI and CGI Restrictions should have Active Server Pages and ASP.NET v4.0 (32-bit) in the Allowed category.
	Default web site	Ensure the default web site points to the <AtHocENS\wwwroot> folder.
	Virtual directories	The AtHoc website must contain the following virtual directories: Data—Points to <AtHocENS>\CommonSiteData\AtHocData Graphics—Points to <AtHocENS>\CommonSiteData\Graphics
	Web applications	The AtHoc website must contain the following Web applications: api v1 v2 ast athoc-cdn athoc-iws AuthServices Auth CascadeAlertAgent client config csi D911Server Data DataExport EasyConnect EmailResponse errorpages Graphics gw help icons images include monitor redirector sdk selfservice sps sso syndication temp twitterconfig user wis
	ASP.NET version	All Web applications must point to the ASP.Net 4.0 version.IIS 7: this is set in the Basic or Advanced settings of each Application Pool.
	Application pools	The following Application Pools are created during the application server installation and must be present: DefaultAppPool AtHoc Advanced Scheduler Pool AtHoc Alert Coordinator Pool AtHoc Auth Services .Net Core pool AtHoc Batch Coordinator Pool AtHoc D911 Pool AtHoc Default Pool AtHoc Delivery Coordinator Pool AtHoc Desktop Integrated Pool AtHoc Desktop Pool AtHoc IWS Pool AtHoc Management System Pool AtHoc PSS Polling Agent Pool AtHoc Regular Scheduler Pool AtHoc SDK Pool AtHoc Self Service AtHoc Syndication Pool AtHoc Tracking Processor Pool AtHoc Tracking Summary Coordinator Pool AtHoc User Termination Coordinator Pool AtHoc WebAPI Pool AtHoc WebAPI v2 .Net Core pool
	Integrated Weather Alerts	Verify that the internal routing from the application server to the domain name (https://api.weather.gov/alerts/active) is functioning correctly over HTTP.
	MIME Types	Verify that the following MIME types exist: .mp4, video/mp4 .webm, video/webm .woff, application/x-wor
	IWS services	Advanced Scheduler Alert Coordinator Batch Coordinator Delivery coordinator PSS Polling Agent Regular Scheduler Tracking Processor Tracking Summary Coordinator User Termination Coordinator
	Response headers	There are six response headers for Default Web Site: Content-Security-Policy, Value: default-src https: data: 'unsafe-inline' 'unsafe-eval' Strict-Transport-Security, Value: max-age=31536000; includeSubDomains; Preload X-Content-Type-Options, Value: nosniff X-Xss-Protection, Value: 1;mode=block X-Frame-Options, Value: SAMEORIGIN X-Powered-By, Value: AtHoc Inc.

Section:

Application pool configuration tables