Re: URLScan not blocking/logging anything (W2k3, IIS6)

From: Bernard Cheah [MVP] (qbernard_at_hotmail.com.discuss)
Date: 07/22/05


Date: Fri, 22 Jul 2005 15:53:41 +0800

How do you know that is functioning ? you request a .exe and it serves?
And of coz, do you really need urlscan with IIS6 ? refer
http://www.microsoft.com/technet/security/tools/urlscan.mspx#EDAA

-- 
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/
"Scott" <mcgillivray@gmail.com> wrote in message 
news:1121974902.545694.49040@o13g2000cwo.googlegroups.com...
> Hi,
>
> I have installed URLScan on my W2k3 web server, and it appears to be
> loaded correctly (green up-arrow in the ISAPI filters tab), but it is
> not functioning at all.  It is not blocking the extensions it should
> block, nor is it generating a log file.  Any ideas why this would
> happen?  I have un/reinstalled it without any effect.  My next step is
> to uninstall IIS, but would rather not have to do that if I can avoid
> it.
>
> Thanks.
> 


Relevant Pages

  • Re: Trend C/S/M SMB on SBS2003
    ... IIS6 is locked down by default, so you do not need to run IIS Lockdown ... URLScan can run on IIS6 if you wish. ...
    (microsoft.public.inetserver.iis)
  • Re: Trend C/S/M SMB on SBS2003
    ... IIS6 is locked down by default, so you do not need to run IIS Lockdown ... URLScan can run on IIS6 if you wish. ...
    (microsoft.public.windows.server.sbs)
  • Re: Where is the IIS6 IISLockdown setup files located?
    ... IIS6 nor give instructions on how to install it. ... URLScan on IIS6 due to security changes. ...
    (microsoft.public.inetserver.iis.security)
  • Re: URLScan and IIS6
    ... IIS6 is locked down by default, so you do not need to run IIS Lockdown ... URLScan can run on IIS6 if you wish. ... and the upgrade/clean install to IIS6. ...
    (microsoft.public.inetserver.iis.security)
  • RE: IIS6.0 and UrlScan
    ... We say that IIS6 has already been locked down, ... However, URLScan does have some ... additional features that IIS6 built-in hasn't involved, ... Get Secure! ...
    (microsoft.public.inetserver.iis)