Securing IIS 7.0

[Pantlegz]

From a software side what needs to be done? I have a unit that is deploying their own web server, with my 'assistance' and I admittedly don't have a clue about keeping it secure. I know from a networking stand point that it's going to be ok but as far as software, or people getting in on port 80, which wouldn't be too hard. I've been thinking about redirecting port 80 coming in on the firewall to something else on inside...