Enable HTTP Transport Security (HSTS) in IIS 7
Q. What is the best way to turn on HTTP Strict Transport Security on an IIS 7 web server? Ans: This can be done by adding following block in Web.Config: <system.webServer> <httpProtocol> <customHeaders> <add name ="X-CustomName" value="MyCustomValue"/> </customHeaders> </httpProtocol> </system.webServer> We have to configure on IIS that has the ability to custom headers to response: Go to Internet Information Services(IIS) Manager. Configure Response headers that are added to response from the server. Now add your custom header Name and custom Value (Custom header name and value should be same as that in Web.Config).