IIS Security

A Happy New Year to all! I built a corporate intranet site (ASP.NET, IIS 6.0, W2K3) that (until now) was only used by domain users. The authentication mode was set to Integrated Windows authentication, so clients could be easily identified ...

I have an IIS server that uses SSLv3 with server and client certificates from a third-party CA. I would like to map users to these third party certs and have my IIS application (SharePoint) logon the account associated with the client certs.  ...

Trying to manage the IP restrictions in IIS 6.0 is a nightmare! The IPs are not sortable, and aren't even sorted, so trying to go through hundreds of IPs to delete some is a real PITA! Is there any 3rd party util to manage IP restrictions, or some other way ...