Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

How to disable Double Escape filter in URLScan ?

Posted on 2009-06-30
4
1,470 Views
Last Modified: 2012-05-07
Hello,

I'm using URLScan 3.1 to help improve a IIS 6.0 + Exchange
OWA Security.
I'm getting a lot of "Rejected URL+is+double+escaped" errors.
How can I disable the URLScan Double Escape filter ??

Thanks in advance!
0
Comment
Question by:itfly
  • 2
4 Comments
 
LVL 65

Expert Comment

by:Mestha
ID: 24748187
Is the server dedicated to Exchange? If so then you shouldn't run URLSCAN on the machine. It isn't required and will simply break OWA.

Simon.
0
 

Author Comment

by:itfly
ID: 24748526
Hello Simon,

Thanks for the tip...

The only problem I noticed using URLScan with OWA is that boring error message about "double escaped urls".

Do you know how may I disable it?

Thanks in advance!

Best Regards,
0
 
LVL 65

Accepted Solution

by:
Mestha earned 500 total points
ID: 24748587
Never used URLSCAN on Windows 2003 as it is unnecessary. No idea how to disable that - even if you should.

Simon.
0
 
LVL 1

Expert Comment

by:maduko
ID: 25236409
So why does it keep SQL injection attacks out?
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
Preparing an email is something we should all take special care with – especially when the email is for somebody you may not know very well. The pressures of everyday working life stacked with a hectic office environment can make this a real challen…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This video discusses moving either the default database or any database to a new volume.

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question