Opensource WAF's for IIS

[Yash Mehta]

Hello All,

I'm looking for a Web Application Firewall for IIS.
I can't decide between mod_security and WebKnight

Please share your views and suggestions.

I would also like to know if there're any other opensource WAF you're using or know about (for IIS).

Thanks.

[prashant kv]

Hi,

.net has lot of inbuilt security features like validaterequest which blocks mallicious inputs. Dont think lot many bypass of this is available.Check the below link

https://docs.microsoft.com/en-us/aspnet/whitepapers/request-validation

check web2wall tool from blueinfy.com. I have never used it but seems to work like a WAF

http://www.blueinfy.com/web2wall.net.zip

another interesting tool can be:

https://www.mcafee.com/us/downloads/free-tools/validator-net.aspx

Regards

Prashant

Virus-free. www.avast.com

--
______________________________________________________________________________
null - Spreading the right Information
null Mailing list charter: http://null.co.in/section/about/null_list_charter/
---
You received this message because you are subscribed to the Google Groups "null" group.
To unsubscribe from this group and stop receiving emails from it, send an email to null-co-in+unsubscribe@googlegroups.com.
Visit this group at https://groups.google.com/group/null-co-in.
For more options, visit https://groups.google.com/d/optout.

--

good.best.guy

[Suraj Pratap]

Both are good, you just need to configure them properly.

WebKinght is bit heavy as compare to mod_security. 

--