Microsoft Knowledge Base Email Alertz

URLScan is a security tool that works in conjunction with the

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 307608 - Last Review: April 20, 2012 - Revision: 11.1

Using URLScan on IIS

This article was previously published under Q307608

SUMMARY

The purpose of this article is to ensure effective distribution of the Internet Information Services (IIS) security tool URLScan. URLScan is an add-on tool that can be used by Web site administrators. The administrators can control the actions of URLScan and can restrict the type of HTTP requests that the server processes.

If you are upgrading from an earlier version of URLScan (2.0, 2.1), all your previous configuration settings are retained while the executable and the URLScan.ini is updated with new features of URLScan 2.5.

MORE INFORMATION

Before you install URLScan 2.5, see the white paper on the following Microsoft Web site:
http://technet.microsoft.com/en-us/security/cc242650.aspx (http://technet.microsoft.com/en-us/security/cc242650.aspx)

To download URLScan 2.5, visit the following Microsoft Web site:
http://microsoft.com/downloads/details.aspx?FamilyId=23D18937-DD7E-4613-9928-7F94EF1C902A&displaylang=en (http://microsoft.com/downloads/details.aspx?FamilyId=23D18937-DD7E-4613-9928-7F94EF1C902A&displaylang=en)
For information about URLScan and other security details in IIS, see the webcast on the following Microsoft Web site:
http://technet.microsoft.com/en-us/security/cc242650 (http://technet.microsoft.com/en-us/security/cc242650)
For additional information about each feature of URLScan, click the following article number to view the article in the Microsoft Knowledge Base:
326444  (http://kbalertz.com/Feedback.aspx?kbNumber=326444/EN-US/ ) HOW TO: Configure the URLScan Tool
Depending on the applications that you are running, there may be limitations or specific configurations for URLScan. For additional information about running URLScan with different applications, click the following article numbers to view the articles in the Microsoft Knowledge Base:
309394  (http://kbalertz.com/Feedback.aspx?kbNumber=309394/EN-US/ ) HOW TO: Use URLScan with FrontPage 2000
318290  (http://kbalertz.com/Feedback.aspx?kbNumber=318290/EN-US/ ) HOW TO: Use URLScan with FrontPage 2002
815155  (http://kbalertz.com/Feedback.aspx?kbNumber=815155/EN-US/ ) HOW TO: Configure URLScan to Protect ASP.NET Web Applications

APPLIES TO
  • Microsoft Internet Information Services 6.0
Keywords: 
kbinfo kbsectools kbsecurity KB307608
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate