« Previous Next »
Last post 05-26-2008 3:33 AM by Christian Paparelli. 1 replies.
Average Rating Rate It (5)Thank you for the rating!
Page 1 of 1 (2 items)
Sort Posts: Oldest to newest Newest to oldest
Hi,
Can anyone tell me if it is possible to disable the OPTIONS verb, so that HTTP OPTIONS does not respond upon request.
Further, if it were disabled then will ASP.NET web site still work?
Thanks for your help.
Graham
with IIS 5/6 you can remove WebDAV if it's not necessary, and use Urlscan to remove http Options verb
http://www.microsoft.com/technet/security/tools/urlscan.mspx
For IIS 7 you must use Request Filtering
http://learn.iis.net/page.aspx/143/how-to-use-request-filtering/