Yes IIS Lockdown and UrlScan are an important part of for locking down an IIS server.
Also you want to look over: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/ tools/chklist/iis5cl.asp http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/ tools/chklist/iis5chk.asp And also if you want to lock down the OS and IIS plus security support for Apps etc., look at: http://www.securit-e-doc.com/products/securitelok.asp _____________________ Dave Kleiman [EMAIL PROTECTED] www.netmedic.net "High achievement always takes place in the framework of high expectation." Jack Kinder -----Original Message----- From: NR [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 05, 2003 06:22 To: [EMAIL PROTECTED] Subject: Securing IIS Server Hi, I have IIS Server in which i want to install IIS lockdown and URLScan, i heard they are very good to protect IIS server, are they worth installing, and if not, is there any other tools i can use to secure my IIS ? Thanks and Regards NR --------------------------------------------------------------------------- ---------------------------------------------------------------------------- --------------------------------------------------------------------------- ----------------------------------------------------------------------------
