UrlScan version 2.5 is a security tool that restricts the types of HTTP requests that Internet Information Services (IIS) will process. By blocking specific HTTP requests, the UrlScan security tool helps prevent potentially harmful requests from reaching the server. UrlScan 2.5 will now install as a clean installation on servers running IIS 4.0 and later.
While the UrlScan 2.5 security tool helps protect your server from attacks, you should always evaluate and apply the latest security updates from Microsoft. As new security vulnerabilities are discovered, Microsoft publishes updates such as service packs, patches, or hotfixes. To help mitigate any risks such vulnerabilities might present, you need to apply these security updates as they become available.
The UrlScan security tool comprises two files ? UrlScan.dll and UrlScan.ini ? that are packaged together in UrlScan.exe. This latest update of UrlScan 2.5 gives administrators even greater control over UrlScan configuration and provides functionality that helps administrators further secure and lock down the server.