News

IIS Security Tool Screens Incoming Traffic

Microsoft Corp. this week gave Web server administrators a tool that lets them act as a border guard -- stopping suspicious requests before they damage IIS boxes.

The protection comes in the form of a tool called URLScan. The tool screens all incoming requests to the Web server and filters them based on rules set by the administrator.

Using the tool, IIS administrators may be able to turn away many of the common types of denial-of-service and other attacks that rely on attackers' flooding a server with malformed requests.

The tool comes with a default set of rules. Administrators can configure the rules themselves to customize the tool for their own needs. However, Microsoft does warn that the tool should only be used by experienced Web administrators. "It is possible to configure the filters in a way that would interfere with normal Web site operation," Microsoft notes.

The tool works with IIS versions 4.0, 5.0 and 5.1 on Windows NT 4.0, Windows 2000 and Windows XP. The 162 KB executable can be downloaded here.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Vendors Issue Patches for Linux Container Runtime Flaw Enabling Host Attacks

    This week, the National Institute of Standards and Technology (NIST) described a high-risk security vulnerability (CVE-2019-5736) for organizations using containers that could lead to compromised host systems.

  • Windows 10 Version 1809 Users May Get Visual Studio Crashes

    Microsoft on Friday issued an advisory for Windows 10 version 1809 users about possible Visual Studio crashes.

  • Standardizing the Look of Outlook's Outbound Messages

    Microsoft typically gives users a blank canvas to compose new e-mails in Outlook. In some corporate environments, however, a blank canvas isn't a good thing.

  • Windows 10 'Semiannual Channel Targeted' Goes Away This Spring

    Microsoft plans to slightly alter its Windows servicing lingo and management behavior with its next Windows 10 operating system feature update release, coming this spring.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.