IIS 7.5 Request Filtering logs versus UrlScan 3.1
- by Mouffette
When IIS 7.5 Request Filtering blocks a request it seems to add an entry into the regular IIS web logs with a 404.
a) Is there any way to send the detailed Request Filtering logs to a separate file? UrlScan could specify LoggingDirectory and keep this "noise" out of our real IIS logs
b) Also, is there a way to get more information that Request Filtering blocked a request? UrlScan logged the rule that caused the denial as well as control over a redirection using RejectResponseUrl which was especially convenient in non-production sites.
c) If these features are important is the recommended practice to still install UrlScan 3.1 on IIS 7.5 (Windows 2008 R2) and disable Request Filtering?
Any guidance is appreciated.
