Using this network security tool you can restrict the types of HTTP requests that are allowed to be processed by Microsoft Internet Information Services.
UrlScan
UrlScan is a Windows program for blocking specific HTTP requests to protect the network from external threats. The integrated ISAPI filter screens and analyzes incoming packets to prevent the execution of potentially malicious code. It is worth noting that UrlScan requires IIS Metabase for the correct functioning of all features.
How it works
This software lets network administrators configure automatic HTTP request rejection based on a set of predefined criteria. For example, it is possible to filter individual methods, verbs and file extensions. Tools for analyzing suspicious URL encoding and detecting the presence of non ASCII characters in the link are provided as well.
You can block incoming connections that contain specific symbol sequences in the header. This functionality is helpful for preventing certain servers from communicating with the computer.
Applications like DoSHTTP can be used to test the resilience of the network and ensure that the protection is adequate.
Logging
Information about all denied requests such as the complete URL and IP address of the source is stored in a separate text file. There is an option to regularly generate detailed reports and automatically send them to all interested parties via email.
Features
- free to download and use;
- helps you prevent external network attacks by blocking suspicious HTTP requests;
- it is possible to create custom filtering rules to automate the process;
- users can detect the presence of non ASCII characters in URLs;
- compatible with all modern versions of Windows.