IIS5 - 'microsoft false logging weakness'

Please help,

I've got an IIS machine that is failing PCI compliance due to the 'False
Logging Weakness'. the resolution states to use URLScan to translate hex
codes into characters, but I have no idea how to do this...

Can anyone shed some light?

Thanks.
Alan Corbett[1] [ Mo, 29 Oktober 2007 21:04 ] [ ID #1857035 ]

Re: IIS5 - 'microsoft false logging weakness'

Don't quite get you ? false logging weakness?
Urlscan is the IIS add on for IIS 4/5 or even 6 to block requests base on
specific rules.
how does it helps in your case?

Read -
How to configure the URLScan Tool
http://support.microsoft.com/Default.aspx?id=326444


--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"news.microsoft.com" <Alan Corbett> wrote in message
news:%235mtZbmGIHA.5160 [at] TK2MSFTNGP05.phx.gbl...
> Please help,
>
> I've got an IIS machine that is failing PCI compliance due to the 'False
> Logging Weakness'. the resolution states to use URLScan to translate hex
> codes into characters, but I have no idea how to do this...
>
> Can anyone shed some light?
>
> Thanks.
>
Bernard [ Mi, 31 Oktober 2007 04:10 ] [ ID #1858745 ]
Webserver » microsoft.public.inetserver.iis.security » IIS5 - 'microsoft false logging weakness'

Vorheriges Thema: IIS 6 and system's object namespace
Nächstes Thema: Basic Authentication fails with Error 401.2 where Integrated succe