Re: URLSCAN samples

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 07/05/03 

Date: Fri, 4 Jul 2003 17:06:58 -0700

Search for "URLSCAN" on support.microsoft.com and you'll see lots of
suggestions.

Basically, since this is security, there is no "sample". You need to know
what you are running, know what features it needs, then configure URLScan to
lock everything else away. The suggestions simply give you clues and a
guideline on what a particular product needs. 

-- 
//David
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Jean-Marc Vanbel" <jean-marc.vanbel@acsa-cdv.be> wrote in message
news:03bb01c34216$eaa54800$a001280a@phx.gbl...
Where I can find URLSCAN.INI samples whith comments?
Thanks
Jean-Marc

Relevant Pages

  • Re: URLSCAN samples
    ... try searching with FPSE or Front Page Server Extensions ... and URLscan as there was once a KB with a sample ini file that ... > what you are running, know what features it needs, then configure URLScan ... > guideline on what a particular product needs. ...
    (microsoft.public.inetserver.iis.security)
  • IRM 006: The configuration of Microsoft URLScan can be enumerated when implemented in conjunction wi
    ... IRM Security Advisory No. 006 ... Microsoft contacted: July 18th 2003 ... URLScan is an ISAPI filter, provided by Microsoft that performs various ... when RSA Security were made aware of the ...
    (Bugtraq)
  • [TOOL] URLScan, Automatic Request Sanitization Tool from Microsoft
    ... URLScan, Automatic Request Sanitization Tool from Microsoft ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... URLScan protects the server while it's in operation. ...
    (Securiteam)
  • [NT] Microsoft URLScan Configuration Can be Enumerated when Implemented in Conjunction with RSA Secu
    ... Get your security news from a reliable source. ... URLScan is an ISAPI filter, provided by Microsoft that performs various ... the configuration of URLScan and hence potentially uncover malicious file ... IRM identified a serious security ...
    (Securiteam)
  • RE: URL Scan Utility in IISLockdown
    ... URLScan does offer is available here: ... of IIS) Admittedly, crafting a proper ISAPI filter for IIS may not be the ... As the previous poster pointed out, you could add increased security by ... | request being received so that I can apply my own rules as ...
    (microsoft.public.inetserver.iis.security)