>I have IIS Server in which i want to install IIS lockdown and URLScan, >i heard they are very good to protect IIS server, >are they worth installing, >and if not, is there any other tools i can use to secure my IIS ?
iis lockdown is good, but i wouldn't recommend running it on a production server at least until you've had some experience with a non-production server since the permissions can cause many scripts to stop working. But its definatly something that you should be running within an iis environment --------------------------------------------------------------------------- ----------------------------------------------------------------------------
