I've always been a fan of URLScan, originally part of the IIS Lockdown Tool, as it gave tremendous flexibility in URL filtering across different IIS versions that didn't have these capabilities natively built in. Sure, you lost a bit of performance running Read More...