Re: Where is the IIS6 IISLockdown setup files located?

From: Bürgen Straüß (b_strauss@hotmail.com)
Date: 04/21/03 

From: "Bürgen Straüß" <b_strauss@hotmail.com>
Date: Mon, 21 Apr 2003 10:09:40 +1000

"Karl Levinson [x y], mvp" <levinson_k@despammed.com> wrote in message
news:#3Z5#nzBDHA.2328@TK2MSFTNGP10.phx.gbl...
> You can install URLScan if you wish, it does have a few features that were
> not implemented in IIS6. You can't install IISLockdown currently on IIS6,
> you need to extract URLScan from IISLockdown and install just Urlscan.

That is excellent to hear.

> Documentation on IIS6 security features is in your Windows and IIS help
> files and at www.microsoft.com/support and www.microsoft.com/technet

Thanks.

Relevant Pages

  • Re: IIS infection prevention from W32.Nimda.A@mm/TROJ_NIMDA.A
    ... I've had a bunch of messages regarding URLScan. ... complained that they have to install URLScan in order to get the ... TREND MICRO SCANMAIL FOR EXCHANGE 2000 -- SECOND to NONE ...
    (NT-Bugtraq)
  • Re: urlscan overhead
    ... URLScan is performant and adds negligible overhead, ... requests and need to do a fair bit of processing before serving up ... How much additional overhead should I see if I install urlscan? ...
    (microsoft.public.inetserver.iis.security)
  • RE: Securing a directory
    ... One other thing - you should also run IIS lockdown wizard and install URLscan. ... You can configure URLscan to reject requests for file types that you don't want to be directly requestable. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Security in the real world - IIS lockdown tool
    ... You can have as little or as much security as you wish. ... the URLscan software that comes with IISlockdown is a lifesaver. ... Most of the things IISlockdown does you can do manually one by one using the ... > uninstalling IIS lockdown tool and from there the software vendor could ...
    (microsoft.public.win2000.security)
  • Re: Security in the real world - IIS lockdown tool
    ... You can have as little or as much security as you wish. ... the URLscan software that comes with IISlockdown is a lifesaver. ... Most of the things IISlockdown does you can do manually one by one using the ... > uninstalling IIS lockdown tool and from there the software vendor could ...
    (microsoft.public.win2000.security)