In addition to the headers take into account serving your web site by way of https. Lots of browsers is not going to cache https by default. The acknowledged respond to isn't going to appear to work for IIS7+, likely by the massive amount of questions on cache headers not becoming despatched