URLScan software introduction
Web Servers are often the target of various security attacks. Some attacks are so severe that business assets, productivity and customer relationships often suffer significant losses. In fact, all attacks cause people a lot of inconvenience and distress. Ensure Web Server security is key to business success. URLScan is an ISAPI filter that enables Web site administrators to limit the types of HTTP requests that the server will handle. By blocking specific HTTP requests, URLScan filters can prevent potentially harmful requests from reaching the server and causing damage.
URLScan function introduction
1. The new installer allows UrlScan 3.1 to be installed on IIS 5.1, IIS 6.0 and IIS 7.0.
2. Create "deny" rules independent of the query string, all titles or specific titles.
3. The global DenyQueryString section in the configuration allows you to add deny rules for query strings and optionally check for unescaped versions of query strings.
4. Through the global AlwaysAllowedUrls section in the configuration, you can specify safe URLs to bypass all URL-based checks.
5. The global AlwaysAllowedQueryStrings section in the configuration allows you to specify safe query strings to bypass all query string checks.
6. Escape sequences (e.g., %0A%0D) can be used in deny rules, so CRLF and other sequences involving non-printable characters can be rejected.
7. Multiple UrlScan instances can be installed as site filters, each filter has its own configuration and rules (UrlScan.ini).
8. Configuration (UrlScan.ini) change notifications will be propagated to the IIS worker process.
9. Enhanced W3C formatted logging gives descriptive configuration errors in the remarks header.
URLScan software features
1. Prevent potentially harmful requests from reaching web applications
UrlScan 3.1 filters all incoming requests to the server by filtering requests based on rules set by the administrator. Filtering requests helps protect the server by ensuring that only valid requests are processed.
2. Mitigating SQL injection attacks
UrlScan 3.1 can be configured to filter HTTP query string values and other HTTP headers to mitigate SQL injection attacks while fixing the root cause in your application.
3. Analyze log files
UrlScan 3.1 provides logs in W3C format, through log analysis solutions (such as Microsoft Log Parser 2.2) Easier log file analysis.
URLScan usage instructions
1. Download the software compressed package file and select the appropriate installation package according to the system bit number for installation. However, the installation path cannot be selected for this software. After the installation is completed, we can find the following files in the System32/InetSvr/URLScan directory:
Log: Log directory. When the logging function is turned on, log files will be generated in this directory;
urlscan.dll: dynamic link library file;
urlscan.ini: Software configuration file, this file is very simple, because all configurations of URLScan are completed by this file.
2. IIS Management--Website (right-click Properties)---ISAPI Filter--Click Add--Enter the filter name and executable file--Click OK.
URLScan update log
1.Fix some bugs
2. Optimized some functions
Huajun editor recommends:
URLScan software is a software with excellent performance, which is obvious to all. Huajun Software Park also hasQuick Easy FTP Server,Telnet Server,Foxmail Server,xampp,WinShellWaiting for related software that is definitely worth downloading and using, come and choose your favorite one!
Useful
Useful
Useful