Blocking VML with ISA 2004 & ISA 2006

re: Blocking VML with ISA 2004 & ISA 2006

HD Video Converter — Tue, 26 May 2009 10:11:14 GMT

Hello! Very interesting. Thank you.

re: Blocking VML with ISA 2004 & ISA 2006

Donald — Tue, 26 Sep 2006 15:45:05 GMT

Just installed in a test environment and had one problme on ISA 2006. It broke rpc/https publishing. I had to uncheck the filters to make it work.

Hot to block the VML exploit using ISA

AlunR — Tue, 26 Sep 2006 14:14:38 GMT

The ISA product team blog has details and links to instructions on how to configure ISA 200x to block...

Hur man blockerar VML-vulnen med ISA Server

Michael Anderberg, CISSP - Microsoft AB — Tue, 26 Sep 2006 12:05:00 GMT

Hej på er,
Som ett avbrott i byggandet, ISA Teamet har postat i sin blog hur man gör för att skydda...

Blog du Tristank : ISA Server Product Team Blog : Blocking VML with ISA 2004 & ISA 2006

Tue, 26 Sep 2006 10:31:30 GMT

PingBack from http://blogs.technet.com/tristank/archive/2006/09/26/459024.aspx

re: Blocking VML with ISA 2004 & ISA 2006

Ori Yosefi - MSFT — Tue, 26 Sep 2006 00:27:51 GMT

UPDATE

Tim's report uncovered an odditiy in VBScript processing of the 'and' test. changing the script to a 'nested if' fixed the problem.

..I like JScript soooo much better...

re: Blocking VML with ISA 2004 & ISA 2006

Tim Long — Mon, 25 Sep 2006 23:15:24 GMT

I've just re-downloaded the script from the IsaTools.org link above to verify and in fact I did paste the wrong code snippet into my blog entry (now corrected, apologies for the confusion). The content was substantially correct and the addition of parenthesis was my first stab at troubleshooting the script.

I understand and support the statement that people should only use the "official" script - the changes I made are documented in my blog entry for anyone who wants to do likewise.