Ive been trying to write a filter based on __VIEWSTATE but I can only get it to scan and filter based on the viewstate if I use ScanAllRaw=1 URLScan rule: [ViewState] AppliesTo=.asp,.aspx DenyDataSection=ViewState Strings ScanUrl=0 ScanAllRaw=1 ScanQueryString=0 ScanHeaders= [ViewState Strings] -- %3b...