SecureIIS Web Server Protection

Web servers provide a portal to your internal network, so they require a more formidable and customized level of protection above and beyond what network firewalls or IDS can provide. SecureIIS provides web server security for the Microsoft IIS platform, with windows server firewall protection from both known and unknown vulnerabilities.

SecureIIS works within the IIS web server, actively inspecting all incoming requests at each stage of data processing to prevent potentially harmful network traffic — whether encrypted or not — from penetrating your server. Even un-patched web servers security needs are addressed and protected from potentially damaging "known" and "unknown" attacks. Unlike intrusion detection systems or server firewalls that rely on signature databases to determine if an attack is taking place, SecureIIS provides webserver security against entire classes of attacks, without the resource drain of constantly updating signature attack profiles.

Features and Benefits

Central Policy Management
SecureIIS provides the ability to manage settings for any number of machines from a single, central location.

Award Winning Graphical User Interface
SecureIIS configuration options are managed through an easy-to-use interface. Logs and real-time statistical charts are easily navigated.

Run-Time Switching
Configurations can be modified without having to restart the web server, thus preventing disruption of the active website.

Real-Time Statistic Charts
Monitors activity in real-time by providing graphs based on class of attack.

Non-Intrusive Protection
SecureIIS offers protection without affecting service levels on your web server. In fact, SecureIIS can even provide improved performance when the web server is under attack.

Third-Party Application Protection
SecureIIS stops attacks launched against third-party web server applications or custom web scripts.

Protection Over SSL Encrypted Sessions
SecureIIS stops attacks on encrypted sessions based on the ability to analyze the content of HTTPS sessions before and after SSL encryption.

Flexible Export Capability
The SecureIIS log can be exported in any number of different formats including tab delimited, text, Excel, SQL and more.

Compatible with Web-Based Applications
SecureIIS works with and protects all common web-based applications such as Flash, Cold Fusion, FrontPage, and Outlook Web Access.

File System Activity Monitoring
SecureIIS can send alerts when such activities as file additions, deletions and modifications occur.

Global-Settings Adjustment
SecureIIS settings can be configured globally across all sites on a server, on a per site basis or on a per virtual directory basis through an intuitive point-and-click interface.