The following security measures must be implemented in order to secure Versago's operation.

HTTPS with SSL is mandatory for Versago.

The Versago website requires the use of the SSL option. In order to use this option effectively you will need to acquire an SSL Certificate. This is a tool that helps ensure secure communication between the web browser and the website.

Download and install the URL Rewrite extension to IIS which is required by Versago to operate correctly.

The extension can be downloaded from Microsoft's IIS site

Disable protocols TLS 1.0 and 1.1.

The easiest way to toggle SSL protocols is by using a utility called IISCrypto.

1. Download the IIS Crypto GUI program
2. Run the IIS Crypto program
3. Click on Best Practices
4. Deselect TLS 1.0 and 1.1 for both Server and Client protocols
5. Click Apply
6. Reboot server

Follow these step to manually disable the protocols:

1. Open the registry editor
2. Navigate to \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client
3. Set the DisabledByDefault entry DWORD value to 1
4. Set the Enabled entry DWORD value to 0
5. Navigate to \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server
6. Set the DisabledByDefault entry DWORD value to 1
7. Set the Enabled entry DWORD value to 0
8. Repeat for TLS 1.1
9. Reboot server

Define a host name and set 'Require Server name Indication' in the bindings settings for the Versago site.

1. Open IIS Manager
2. Select the Versago Site on the left pane
3. Go to the Actions pane to the right and select and edit Bindings
4. set Hostname to your site's name and select Require Server Name Indication as shown below