If I use UrlScan to block common SQL Injection attempts on asp- and aspx-files, I would do something like this: [SQLInjection] AppliesTo=.asp,.aspx DenyDataSection=SQLInjectionStrings ScanURL=0 ...
A long time ago before I left the Windows environment, there was such a thing as "IIS lockdown tool" - something that Microsoft provided for free. It was meant to well lock down your IIS instance and ...
Currently running an IIS server with some legacy asp & sql. I was wondering if there are any good isapi filters which would automate checking for SQL injection attacks ?