What Options should I Select when Using IISLockdown on an IIS Server Used for Serving Caché Server Pages (CSP)?
Applies to: CSP and MS Internet Information Services (IIS)
Either select "Dynamic Web Server (ASP enabled)" and then check the box that says "View Template Settings", or select "Other (Server that does not match any listed role)".
Whichever you choose, you will see the options for all the individual settings.
For the ASP route, all you need to change is the setting to disable the ASP script map. For the Other route you will probably need to disable FTP and SMTP services.
If you selected IISLockdown's URLScan and are using CSP's HyperEvents, you will also need to edit the c:\winnt\system32\inetsrv\urlscan\URLScan.ini file to allow URLs that contain the % character, because HyperEvents invoke csp/Broker/%CSP.Broker.cls.
Of course, you really need to know what other services, apart from CSP, your site might be using. And you should run your IISLockdown on your test site and verify it before doing it to your production site. However, there is an option to back out all your changes if necessary.
Last reviewed: March 26, 2002
Back to Caché Knowledge Base