Block the VML Vulnerability with ISA Firewall’s HTTP Security Filter
The first course of action taken against this attack must be protecting and patching all affected computers. Details of this issue can be found here.
The following information explains how to use Microsoft Internet Security and Acceleration (ISA) Server 2004 or 2006 to help block malicious traffic intended to exploit this attack and to protect computers on internal networks.
The first section of this article contains technical details about this attack:
This article also discusses how ISA Server can mitigate a this attack attack:
Helping to prevent this attack attacks through ISA Server
Protecting the ISA Server computer from this attack attacks
This article also discusses:
How to Make Sure ISA Server 2004 or ISA Server 2006 Is Correctly Configured
For detailed instructions, check out:
http://www.microsoft.com/technet/isa/2006/how-to-b...#8230;
HTH,
Tom
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
Email: tshinder@isaserver.org
MVP — Microsoft Firewalls (ISA)
