We currently only allowing access to our website to a fixed set of IPs. We
are blocking these at the firewall now. As we are growing, we're adding more
and more IPs to allow access and our firewall guys love us.

My question is:
Is the IP address blocking feature a suitable replace for blocking at the
firewall?

Thanks.

Yes, definitely better to put in on firewall/router level.
Configuring it at IIS will take certain process time for IIS to determine
where or not to access the request. As the list get longer, the longer it
will take to check.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"TheElderGod" <TheElderGod [at] discussions.microsoft.com> wrote in message
news:223B4907-24CB-4CD4-A49C-955BF9F641E2 [at] microsoft.com...
> We currently only allowing access to our website to a fixed set of IPs.
> We
> are blocking these at the firewall now. As we are growing, we're adding
> more
> and more IPs to allow access and our firewall guys love us.
>
> My question is:
> Is the IP address blocking feature a suitable replace for blocking at the
> firewall?
>
> Thanks.