June 28th, 2004, 11:13 PM
I have recently installed Software Update Server (SUS) on my 2K Server. When I try to access the web-based administrator page (../susadmin/default.asp) -- it gets denied via URL Scan. The logs report "Rejected-By-UrlScan." The irony is that URLScan is installed by SUS ... I previously had URLScan on the system, with default settings only. SUS was installed with all default settings, as well.
Is this a bug? A feature? A product that breaks itself upon install...
Any input would be appreciated.
June 28th, 2004, 11:20 PM
If you have left URLScan in it's default config then it is set to disallow access to asp pages. Go into urlscan.ini and page down to the "disallow requests for" section and comment out .asp with a ";", (no quotes required), restart the IIS server and you'll be fine.
Don\'t SYN us.... We\'ll SYN you.....
\"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides
June 29th, 2004, 06:39 AM
I had a similar problem when I first started playing around with SUS a few years ago. I ran the IIS lock down utility and unlocked everything (I had locked it previously). That allowed it to work. Then, I ran it again. and locked it down again and it worked fine. I don't know... something you could try. I haven't used SUS in a while and now I actually know what I'm doing with IIS so I lock it down myself. Worth a shot.