Microsoft Supported & Community Downloads for IIS...

Microsoft downloads are fully supported with future updates, bug fixes and customer support. Community downloads are submitted by IIS community members and do not benefit from Microsoft approval or support, and should be downloaded with this in mind.

Get the Web Platform Installer

Most Microsoft Downloads can be installed using Web Platform Installer however it is not required.

All Microsoft Supported Downloads

Dynamic IP Restrictions

Published by Microsoft

Windows

The Dynamic IP Restrictions Extension for IIS provides IT Professionals and Hosters a configurable module that helps mitigate or block Denial of Service Attacks or cracking of passwords through Brute-force by temporarily blocking Internet Protocol (IP) addresses of HTTP clients who follow a pattern that could be conducive to one of such attacks. This module can be configured such that the analysis and blocking could be done at the Web Server or the Web Site level.

UrlScan 3.1

Published by Microsoft

Windows

UrlScan 3.1 is a security tool that restricts the types of HTTP requests that IIS will process. By blocking specific HTTP requests, the UrlScan 3.1 security tool helps to prevent potentially harmful requests from reaching applications on the server. UrlScan 3.1 is an update to UrlScan 2.5 supports IIS 5.1, IIS 6.0 and IIS 7.0 on Windows Vista and Windows Server 2008.

All Community Contributed Downloads

ThreatSentry 4 - IIS Web Application Firewall

Published on 08/17/2010 by privacyware

User

ThreatSentry is a Web Application Firewall and Intrusion Prevention solution that helps system administrators improve web application security and comply with regulatory demands such as Section 6.6 of the Payment Card Industry Data Security Standard. ThreatSentry 4 supports Windows Server 2008 R2 and IIS 7 on 32 and 64 bit systems. An ISAPI Extension hosted in MMC, ThreatSentry’s knowledgebase of pre-configured filters is designed to identify and block a broad range of web application threats...

AuthXt for IIS

Published on 08/05/2010 by sliechti

User

With AuthXt, you can extend your web server's functionality with a custom authentication mechanism. You can password protect any type of resources on your site (directories, videos, images) authenticating users against different type of back ends.

ServerDefender VP IIS Web Application Firewall

Published on 07/08/2010 by port80

User

Web applications are at the center of business online and are constantly threatened by common threats like SQL injection, XSS, and new, unknown zero day threats. Not only is ServerDefender VP’s host-based application security powerful, it's easy to use with slider controls to strengthen and loosen security policies. ServerDefender VP Web application firewall for IIS is designed to provide protection for websites and applications running on the Microsoft IIS Web server by blocking Web attacks....