SecureIIS delivers integrated Windows firewall protection for Windows IIS Servers, protecting against known exploits, zero day attacks, and other harmful web server traffic.

Web Server Protection

SecureIIS web server security delivers integrated multi-layered windows server protection. SecureIIS provides application layer protection via integration with the IIS platform as an ISAPI filter, protecting against known and unknown exploits, zero day attacks, and unauthorized web access.

SecureIIS works with and protects all common web-based applications such as Flash, Cold Fusion, FrontPage, Outlook Web Access, and many third party and custom applications. Configurations can be modified without having to restart the web server, thus preventing disruption of the active website. SecureIIS runtime logs provide detailed explanations as to why requests were denied and allow for data to be exported in any number of different formats including tab delimited, text, and Excel. This activity can also be graphed in real-time based on class of attack. Regardless of the communications protocol, SecureIIS offers protection without affecting service levels on your web server, and even stops attacks on encrypted sessions based on the ability to analyze the content of HTTPS sessions before and after SSL encryption.

Features:

• Application Layer Protection: Inspect requests as they come in from the network, handed off at the kernel, and at every level of processing in between. SecureIIS will prevent unauthorized access and/or damage to the web server.
• Zero Day Protection: eEye's extensive research and knowledge of the many ways in which IIS servers can be compromised, both know and yet-to-be-discovered vulnerabilities specific to IIS are secured.
• Encrypted Session Protection: Unlike traditional network firewalls, SecureIIS can analyze HTTPS sessions before and after SSL (Secure Socket Layer) encryption, and can therefore stop attacks on both unencrypted and encrypted sessions.
• Integration with IIS: SecureIIS integrates as an ISAPI filter, monitoring data as it is processed by IIS, blocking requests at any point if it resembles one of many an attack pattern.
• Complete Attack Protection: SecureIIS protects these attacks, and more: buffer overflow, parser evasion, directory traversal, high-bit shellcode, RFC compliancy, and general exploitation.