IIS Security

Hi all, We were recently dinged during a client's penetration test.  The issue revolves around an intentionally incorrect Host header in a request to IIS.  Specifically, the request is for a directory as in https://our.domain.com/dir/dir2.  Note the lack of a trailing slash on ...

Hi, I am hoping someone can help with this. We have a web application that can be viewed over https. Inconsistently our users keep getting "This page contains both secure and nonsecure items". Whether they say yes or no to the message about only displaying the secure ...

Hello, I set up OWA to our Exchange Server. I don't want to go to the expense of getting a "real" certificate but can't get it to work. If I go to https://server.mycompany.com/exchange I am getting the "There is a problem ...