0
votes
1answer
80 views

How can I make UrlScan test extensionless urls?

If I use UrlScan to block common SQL Injection attempts on asp- and aspx-files, I would do something like this: [SQLInjection] AppliesTo=.asp,.aspx DenyDataSection=SQLInjectionStrings ScanURL=0 ...
1
vote
4answers
1k views

What happened to IIS lockdown?

A long time ago before I left the Windows environment, there was such a thing as "IIS lockdown tool" - something that Microsoft provided for free. It was meant to well lock down your IIS instance and ...
3
votes
1answer
423 views

SQL Injection Filter IIS

Currently running an IIS server with some legacy asp & sql. I was wondering if there are any good isapi filters which would automate checking for SQL injection attacks ?