ServerFiles.com is a server software & hardware directory for Network administrators & IT professionals, listing networking & server software for Windows 2003, Windows 2000, NT and Linux; and now also listing networking hardware solutions focused on server based computing.
IISShield is an IIS ISAPI Filter preventing any known and unknown attacks from disrupting IIS. The preventive approach of IISShield is an added value preventing IIS from even trying to interpret requests trying to break-in. With a detailed logging engine, IISShield helps IIS administrators to know in advance and protect IIS from known or unknown HTTP attacks that flow over the Internet. The configuration provides the ability to precisely decide over what is accepted and what is not regarding the HTTP Layer. RFC Compliance is just one of the core features of IISShield offering an assurance of quality of service to the IIS Administrator.
ISAPI Filters offer a way of managing (changing, altering, customizing) some of the core parts of IIS. Customizing the "Server" response header is one of those tasks. While altering the "Server" response header may be useful at a security prespective by disguising the web server banner (security by obscurity), keep in mind that there are much more powerfull ways of detecting a server type using tools like nmap. IISBanner is an IIS ISAPI Filter that can be used to specify a replacement for IIS's built in "Server" header, or even to instruct IIS to not use the "Server" response header altogether. The configuration is made by an .ini file, namely "IISBanner.ini". This configuration file must reside in the same directory of IISBanner.dll.
Notes: Instalation of this ISAPI Filter must be done at the WebServer level; The ISAPI runs at low priority; IIS's performance is NOT affected by this ISAPI Filter. Any stress test will reveal that the number of HTTP requests remains unaffected with or without IISBanner;
Copernic Desktop Search is a search engine that allows employees to search for documents within their company. It enables searching through Word, Excel, PowerPoint, PDF files, e-mail, etc. and delivers highly accurate search results in a flash. Search by keyword, phrase, date, author, title, size and more. Index documents that are available on your file servers, Intranet and external websites and your Exchange Public Folders.
File Service Extension enables you have control over the following items related to your web server:server software signature, directory browsing page, visitors's IP address, hosted file resources, realtime connections,traffic and requests linked from other sites.
File Service Extension Provides you with: Anti-leech, Concurrent connections limit, Concurrent connections from same IP limit, Traffic per day limit, Open hours control, Max session time limit, Real-time connections tracing, Real-time connections handling, Easy IP deny/allow setting, Custom server software signature, Custom directory browsing page
An often overlooked security issue is the exposure of a Web server’s identity via its HTTP header. By anonymizing your Web server's identity, you can trick hackers to attempt mistargeted exploits, making it easier for intrusion detection systems and firewalls to accomplish their missions and foil the hack. ServerMask obscures the identity of a Windows Web server by removing the most obvious signs that you are running IIS. ServerMask removes or modifies unnecessary response data. The software provides control over what Server header data, if any, is visible in HTTP responses. Session cookie masking permits the customization of any type of session cookie (including the Windows-specific ASP session cookie). ServerMask can emulate the Apache Web server’s HTTP header order and disable Microsoft WebDav with one click to suppress its multiple identifiable headers. It also removes the Windows-specific Public header from HTTP responses, a relic of HTTP 1.0 seldom used today, and converts the Windows SMTP banner to any message. When combined with these security recommendations and other server tools like PageXchanger and CustomError, ServerMask provides the anonymization component of your total security strategy.
IIS Lockdown Wizard version 2.1 works by turning off unnecessary features, thus reducing attack surface available to attackers. To provide multiple layers of protection against attackers, URLscan, with customized templates for each supported server role, is integrated into the IIS Lockdown Wizard. To keep the server completely secure, however, all hotfixes are required before and after applying IIS Lockdown Wizard to stay protected against known security vulnerabilities.
Microsoft has released an updated version of the URLScan security tool, 2.5, with additional functionality that provides greater security and functionality than previous versions of the tool. URLScan 2.5 is an update to URLScan 1.0 and URLScan 2.0.
Important Urlscan stops many types of attacks but is not a substitute for staying up to date on patches. Microsoft strongly recommends that customers apply security patches to keep the server secure and fix known security vulnerabilities.
Admin Report Kit for IIS (ARKIIS) is a reporting tool for Microsoft IIS Administrators. ARKIIS presents IIS configuration information from the IIS MetaBase in the form of Trees, Tables and Views. All categories of information reported by ARKIIS are available across web servers and websites. This means that information may be viewed and reported for several web servers in the enterprise simultaneously from a single server machine. ARKIIS assists in monitoring and tracking IIS information in a certain way that is most suited for efficient administration and reporting requirements, especially web servers that have a large number of web sites, virtual directories and associated configuration settings.
httpZip is an IIS server module that reduces costs, improves page load times for your site's visitors, and leverages your current server resources -- transparently compressing Web pages using HTTP encoding algorithms supported in modern browsers. This powerful compression reduces page sizes to as little as 2% of their original size. httpZip takes compression even farther by employing optional white space removal and other forms of safe HTML/CSS compression to improve performance and combat hackers' source sifting. Built-in compression cache avoids needless recompression. Features fully customizable compression rules.
Mail Storage Guard is an extension for Microsoft Exchange 2000/5.5 and IIS SMTP servers, designed to protect your mail server from spam, prevents mail relaying, mail bomb and NDR attacks. The protection is realized both on the level of SMTP protocol and on the level of message delivery to storage. Mail Storage Guard follows all incoming mail which comes to your SMTP server and if the message is spam then it is deleted, rejected, sent to mail server administrator or set to Bad mail folder. Features include: Protection on SMTP protocol level; Protection on transport level; Message delivery only to registered receivers; Message blocking with the help of Senders Black-List; Message blocking with the help of DNS blackhole list; Sending of the blocked messages to mail server administrator and more.