Re: Tools for IIS security check

["GSimmonds" <gards () infinity net>]

----- Original Message -----
From: "Harish Gondavale" <hardgo () yahoo com>
To: <SECURITY-BASICS () SECURITYFOCUS COM>
Sent: Tuesday, December 17, 2002 11:49 PM
Subject: Tools for IIS security check


> Hi all,
>
> Can somebody give few good free tools' name, which can
> be used to verify that IIS is secured completely?
>
> I know few of them : Nessus, Nikto
>
> Thanks for all your help.
>
> Bye.
>
> Harish

Hello,

There's also IIS Lockdown Wizard:
http://www.microsoft.com/technet/security/tools/locktool.asp.

If you're interested, there's a detailed walkthrough "Securing Information
Internet Server"
on www.informit.com. You'll have to register, but it's free and worth it
imho.

www.sans.org also has several good articles and links.

Regards,

Gary