Microsoft KB Archive/307608

= Using URLScan on IIS =

Article ID: 307608

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft Internet Information Services 6.0
 * Microsoft Internet Information Services 5.1
 * Microsoft Internet Information Services 5.0
 * Microsoft Internet Information Server 4.0

-



This article was previously published under Q307608



SUMMARY
The purpose of this article is to ensure effective distribution of the Internet Information Services (IIS) security tool URLScan. URLScan is an add-on tool that can be used by Web site administrators. The administrators can control the actions of URLScan and can restrict the type of HTTP requests that the server processes.

If you are upgrading from an earlier version of URLScan (2.0, 2.1), all your previous configuration settings are retained while the executable and the URLScan.ini is updated with new features of URLScan 2.5.



MORE INFORMATION
Before you install URLScan 2.5, see the white paper on the following Microsoft Web site:

http://www.microsoft.com/technet/security/tools/urlscan.mspx

To download URLScan 2.5, visit the following Microsoft Web site:

http://microsoft.com/downloads/details.aspx?FamilyId=23D18937-DD7E-4613-9928-7F94EF1C902A&displaylang=en

For information about URLScan and other security details in IIS, see the webcast on the following Microsoft Web site:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;817807

For additional information about each feature of URLScan, click the following article number to view the article in the Microsoft Knowledge Base:

326444 HOW TO: Configure the URLScan Tool

Depending on the applications that you are running, there may be limitations or specific configurations for URLScan. For additional information about running URLScan with different applications, click the following article numbers to view the articles in the Microsoft Knowledge Base:

309394 HOW TO: Use URLScan with FrontPage 2000

318290 HOW TO: Use URLScan with FrontPage 2002

815155 HOW TO: Configure URLScan to Protect ASP.NET Web Applications

Keywords: kbinfo kbsecurity kbsectools KB307608

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.