I was told to have this
<meta http-equiv='pragma' content='no-cache'>
<meta http-equiv='cache-control' content='no-store'>
I am not sure whether this is required or not. I used .net 4, IIS 7.5 and mvc application.
The site have some security area to view sensitive content. And I believe this is not necessary for .net project.
If I was wrong on this, please correct me.
Neither is added by default in IIS. If you don’t want the (well behaved) client to cache the content of the page, you need those server headers (or the meta http equivalent).
More on HTTP Cache at, Header Field Definitions & Caching in HTTP
A better method in my opinion is to set them as HTTP headers as here, How do I add site-wide no-cache headers to an MVC 3 app