|
Packit Service |
384592 |
Please note that installing ModSecurity for IIS requires IIS to be installed and enabled.
|
|
Packit Service |
384592 |
|
|
Packit Service |
384592 |
|
|
Packit Service |
384592 |
After installing ModSecurity for IIS, the module will be running in all websites by default. To remove from a website add to web.config:
|
|
Packit Service |
384592 |
|
|
Packit Service |
384592 |
<modules>
|
|
Packit Service |
384592 |
<remove name="ModSecurityIIS" />
|
|
Packit Service |
384592 |
</modules>
|
|
Packit Service |
384592 |
|
|
Packit Service |
384592 |
To configure module in a website add to web.config:
|
|
Packit Service |
384592 |
|
|
Packit Service |
384592 |
|
|
Packit Service |
384592 |
<configuration>
|
|
Packit Service |
384592 |
<system.webServer>
|
|
Packit Service |
384592 |
<ModSecurity enabled="true" configFile="c:\inetpub\wwwroot\xss.conf" />
|
|
Packit Service |
384592 |
</system.webServer>
|
|
Packit Service |
384592 |
</configuration>
|
|
Packit Service |
384592 |
|
|
Packit Service |
384592 |
where configFile is standard ModSecurity config file.
|
|
Packit Service |
384592 |
|
|
Packit Service |
384592 |
Events from the module will show up in "Application" Windows log.
|