Following fierce criticism of the security of its products, Microsoft has
launched a brace of new, downloadable tools designed to reduce IIS
vulnerabilities, while helping administrators to keep on top of essential
security fixes. But analysts warn the server security tool may compromise
functionality in the name of security. The
IIS Lockdown tool is designed to address vulnerabilities associated with
printing and scripting features in IIS Web Server 4.0 and 5.0, by automatically
configuring Web servers to provide only the services that administrators
require. This reduces the ability of viruses and worms to infect machines
through inactive functions.
|