Re: URLScan on ISA 2004->FE Exch 2003

From: Ken Schaefer (kenREMOVE_at_THISadopenstatic.com)
Date: 01/29/05


Date: Sat, 29 Jan 2005 23:34:38 +1100

http://www.microsoft.com/technet/security/tools/urlscan.mspx
should give you the information you need.

Cheers
Ken

"Marlon Brown" <marlon_brown@hotmail.com> wrote in message
news:ufKbL5UBFHA.1656@TK2MSFTNGP11.phx.gbl...
>I am wondering whether it is a good idea and necessary setup URLScan &
> iiscantool on my new Win2003+EXch2003 OWA box ?
>
> Also, I was told that I could run the URLScan on the ISA 2004 box and that
> should protect my FE 2003 servers.
>
> Please confirm which version of URLScan and iiscantool I should be
> installing on such Win2003 servers.
>
>



Relevant Pages

  • Re: Logfile question
    ... Where can I find this functionality inside Windows Server 2003 webserver? ... > integrated UrlScan features into their server management practices for IIS ... > and for other Microsoft servers. ...
    (microsoft.public.inetserver.iis.security)
  • Re: URLScan and Hacking
    ... I'm not certain how one comes to the conclusion that URLScan "announces" its ... I'd think that if URLScan's presence alters hacker mentality, ... Has anyone seen an increase in their servers being hacked ...
    (microsoft.public.inetserver.iis.security)
  • More details on ASP.NET vulnerability
    ... Here are some ways to prevent this and other related attacks that might appear in the future: ... Use URLScan, even on IIS 6 servers. ...
    (NT-Bugtraq)
  • Re: Outlook Web Access Issue
    ... Yeah, I got that too when I first setup! ... However that only fixed it internally, where URLScan is install on the FE ... and all the BE servers. ...
    (microsoft.public.exchange.setup)
  • Re: Exchange 2003-SP2 OWA perod at end of subject line - No urlscan
    ... Does the problem server still have URLScan installed? ... IIS6 doesn't seem to need URLScan any more, ... Installing ...
    (microsoft.public.exchange.clients)