URLScan
URLScan Overview
Created Nov 4, 2009 by robmcm
Introduction URLScan v3.1 is a security tool that restricts the types of HTTP requests that Internet Information Services (IIS) will process. By blocking specific HTTP requests, URLScan helps prevent potentially harmful requests from being...
Data Mining URLScan 3.x Logs using LogParser 2.2
Created Oct 22, 2008 by robmcm
Microsoft has released version 3.1 of URLScan , and one of the great new features in this version is log files that conform to the W3C Extended Log File Format . What this means to administrators is that they can now parse their URLScan activity...
URLScan FAQ
Created Jun 24, 2008 by iisteam
The following section provides answers to frequently asked questions about URLScan. Q: Where are my URLScan log files? A: By default the log files are in %windir%\System32\Inetsrv\Urlscan\Logs for both x86 and x64 installations. Your Urlscan.ini...
Common URLScan Scenarios
Created Jun 24, 2008 by iisteam
This article provides a list of common usage scenarios for URLScan v3.1, and how to enable the scenarios using the Urlscan.ini configuration. Creating Rules to Disallow String Patterns in Parts of Requests A new feature added for URLScan v3.1 is...
URLScan Setup
Created Jun 24, 2008 by iisteam
Prerequisites Windows XP, Windows Server 2003, Windows Vista or Windows Server 2008. IIS version 5.1, 6.0 or 7.0 (depending on the platform). Installation Steps Run URLScan v3.1 MSI installer for either x86 or x64 version depending on your...
Use Request Filtering
Created Nov 22, 2007 by iisteam
Introduction UrlScan, a security tool, was provided as an add-on to earlier versions of Internet Information Services (IIS) so administrators could enforce tighter security policies on their Web servers. Within IIS 7, all the core features of...