Re: Should webservers, eg. IIS 6 have anti--virus installed on them?

From: jkowall (jkowall_at_gmail.com)
Date: 07/18/05

  • Next message: Delgado, Jacob M.: "RE: Should webservers, eg. IIS 6 have anti--virus installed on them?" 
    Date: Mon, 18 Jul 2005 10:15:33 -0400
To: ssgill@gilltechnologies.com

    I would have it scan non web pages, such as .doc .exe .com, etc. I
    have a full extension list we use on our IIS servers. This prevents
    execution of malicious code. Its a good idea to AV them, as they are
    a common entry attack vector into your environment.

    On 7/17/05, Sarbjit Singh Gill <ssgill@gilltechnologies.com> wrote:
    >
    > Greetings
    >
    > Should IIS have anti-virus installed on them. I know I would do it for a
    > fileserver but for IIS, I rather lock it down.
    >
    > Thanks.
    > /Gill
    >
    >
    > ---------------------------------------------------------------------------
    > ---------------------------------------------------------------------------
    >
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Delgado, Jacob M.: "RE: Should webservers, eg. IIS 6 have anti--virus installed on them?"

    Relevant Pages

    • Re: Executing a .EXE CGI program
      ... > in IIS that DO NOT have a .EXE extension.? ... Programs on IIS without a .EXE extension -- in fact, ... It's these folks-I-know's server provider who says they have to serve up all cgi-bin files with .EXE extension, versus these folks-I-know's client who says they cannot and will not let any files with a .EXE extension through their firewall. ...
      (microsoft.public.inetserver.iis)
    • Re: Remote application lunch and terminate (IIS server)
      ... If the program you are trying to launch is not a real CGI application, ... What you want to do is possible, but really has NOTHING to do with IIS. ... then invoke a command on the server. ... depends on how the EXE is written. ...
      (microsoft.public.inetserver.iis)
    • Re: Cantt download "exe" file because of IIS version
      ... with IIS and can completely alter IIS behavior in arbitrary manners, ... cut out the EXE download and just standardize the installation using your ... As far as I can tell, we are only running Tomcat as an ISAPI application. ...
      (microsoft.public.inetserver.iis)
    • RE: %processor time for specific application
      ... Administering resource usage of Internet Information Server (IIS) 6.0 ... start multiple processes from the same .exe file. ... The name of the application pool that corresponds to the Web site ... You can now create a process-matching criterion that includes the ...
      (microsoft.public.inetserver.iis)
    • Re: Cantt download "exe" file because of IIS version
      ... The default MIME Type in IIS for .exe is application/octet-stream. ... When I looked at the download type it was still set to the MIME type that I just removed. ...
      (microsoft.public.inetserver.iis)
    • Quantcast