Hi, I try to build a filter on user-agent with URLScan for IIS6. The goal is to authorize a part of my website only for a unique specific user-agent. For the url http://127.0.0.1 there is no filter. But for the url http://172.0.0.1/MyFolder , I need to build a filter on XML files to protect them. The...

I have IIS on my web servers log to a central server. To do this I followed the following links: Configuring IIS to Log Data on a Remote Share: http://technet.microsoft.com/en-us/library/cc757377.aspx Setting Up a Null Session for Cross-Domain Logging: http://technet.microsoft.com/en-us/library/cc728059...

Doing some testing, currently, and running into some issues with this. We've got a couple cases where things like 'cast' or 'open' are appropriate for our webpages. I've setup an AlwaysAllowedQueryStrings section: [AlwaysAllowedQueryStrings] branch=Openshaw branch=Newcastle+upon...

Hi Zhao, Thank you for your reply. I now understand how [AlwaysAllowedUrls] works and where the query string check is still performed on the allowed Urls. To clarify, here is what I would like to achieve. For instance, I would like the following 'url+query string' to be valid: http://www.domain...

I would like to allow a search page to accept all text in the query string. To do this I added the result page to the [AlwaysAllowedUrls]. One thing that is ambiguous from the documentation is if the [AlwaysAllowedUrls] settings also bypasses the custom rules and if the pages listed in [AlwaysAllowedUrls...

does URLScan look at http and https traffic?