Improving Web Application Security: Threats and - CGISecurity

Contents xliRestricting Server-to-Server Communication.............................................................. 784Using IPSec Tools ................................................................................................... 785Netdiag.exe ........................................................................................................ 785IPSecpol.exe....................................................................................................... 785Additional Resources .............................................................................................. 786How ToUse the Microsoft Baseline Security Analyzer 787Applies To .............................................................................................................. 787Summary ............................................................................................................... 787Contents ................................................................................................................ 788Before You Begin .................................................................................................... 788What You Must Know .............................................................................................. 789Scanning for Security Updates and Patches .............................................................. 789Using the Graphical Interface ............................................................................... 789Using the Command Line (Mbsacli.exe) ................................................................ 790Analyzing the Output ........................................................................................... 790Scanning Multiple Systems for Updates and Patches................................................. 790SQL Server and MSDE Specifics .............................................................................. 791Scanning for Secure Configuration............................................................................ 791Performing the Scan............................................................................................ 791Analyzing the Scan.............................................................................................. 792Correcting Issues Found ...................................................................................... 792Additional Information ............................................................................................. 792False Positives From Security Update Checks........................................................ 792Requirements for Performing Remote Scans ......................................................... 792Password Scans ................................................................................................. 793Differences Between Mbsa.exe and Mbsacli.exe ................................................... 793Additional Resources .............................................................................................. 793How ToUse IISLockdown.exe 795Applies To .............................................................................................................. 795Summary ............................................................................................................... 795What Does IISLockdown Do? ................................................................................... 795Installing IISLockdown............................................................................................. 796Running IISLockdown .............................................................................................. 797Log Files ................................................................................................................ 798Undoing IISLockdown Changes................................................................................. 798Unattended Execution ............................................................................................. 798Pitfalls ................................................................................................................... 799