Release Notes

URLScan Web Filter
(Microsoft Internet Security and Acceleration Server 2000 Feature Pack 1)

Contents

1.0 Introduction
2.0 System Requirements
3.0 Installing the URLScan Web Filter
4.0 Removing the URLScan Web Filter
5.0 Limitations and Known Issues

1.0 Introduction

Using the URL scanning feature (also known as the URLScan tool) in ISA Server Feature Pack 1, you can further secure IIS Server publishing. URL scanning enables you to specify which verbs (HTTP methods), headers, extensions, and strings are acceptable in users' HTTP requests.

Back to Contents

2.0 System Requirements

The URLScan Web filter is supported on computers with the following:

Back to Contents

3.0 Installing the URLScan Web Filter

To install the URLScan Web filter, type the following at a command prompt

To perform an unattended installation of the URLScan Web filter, type the following at a command prompt

Note:

Back to Contents

4.0 Removing the URLScan Web Filter

To uninstall the URLScan Web filter

  1. Click Start, click Control Panel, and then click Add or Remove Programs.
  2. Select Microsoft® ISA Server 2000 Updates, and then click Remove.
  3. In ISA Hot Fixes Uninstall, select URLScan Web Filter, and then click Remove.

To remove the URLScan Web filter in unattended mode, type the following at a command prompt

Back to Contents

5.0 Limitations and Known Issues

  1. The URLScan Web filter does not support directory traversal protection for Web sites published using IIS 4.0.
  2. For more information about URLScan and the configuration files that are installed with the Web filter, see the on-line help, accessible from ISA Management.
  3. You cannot publish Outlook Web Access servers when you use the standard IIS configuration file with the URLScan Web filter. You must use the urlscan_owa.ini file. For more information, see the on-line help.
  4. When a Web filter fails to load properly, an appropriate event message is logged to the event viewer. All ISA Server services are restarted, despite the failure. If you want an additional precaution for specific Web filters (including the URLScan Web filter) that monitor for security, create an alert for the Missing installation component or Component load failure event. This will stop the ISA Server services. For instructions on configuring alerts, see ISA Server on-line Help.
  5. You must install the URLScan Web filter on all array members. Otherwise, when the filter is enabled, if you restart services on array members on which the feature pack is not installed, this event message appears, once every hour:
    ISA Server failed to load some_Web_Filter.DLL. The error code shown in the data area of the event properties indicates the cause of the failure.
  6. Configuration information for the URLScan Web filter installed in array configurations is stored in Active Directory. Active Directory replicates the information to all other domain controllers. The configuration is updated when the relevant domain controller is replicated.
    After you install the URLScan Web filter on the first array member, it is recommended that you wait for the Active Directory replication process to complete before installing on other array members.

Back to Contents

Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, people, and events depicted herein are fictitious and no association with any real company, organization, product, person, or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.

© 2002 Microsoft Corporation. All rights reserved.

Microsoft, Outlook, and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries/regions.

Back to Contents