Voice over IP Cisco - Disabling HTTP trace on CM 4.0

This is Interesting: Free IT Magazines  
Home > Archive > Voice over IP Cisco > July 2006 > Disabling HTTP trace on CM 4.0





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Disabling HTTP trace on CM 4.0
candese.perez@gsa.gov

2006-07-13, 1:11 pm

Anyone have experience using URLScan to disable HTTP trace in IIS 5 on a
Call Manager 4.0 server?


Wes Sisk

2006-07-13, 1:11 pm

________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Wes Sisk

2006-07-13, 1:11 pm

________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

candese.perez@gsa.gov

2006-07-13, 1:11 pm

My configuration doesn't currently block TRACE, do you know if this will
affect CM functionality in any way?

Also, what about using URLScan to disable TRACE on Unity version 3.x with
MS Exchange 5.5?





"Wes Sisk" <wsisk@cisco.com>
07/13/2006 09:39 AM

To
candese.perez@gsa.gov
cc
cisco-voip@puck.nether.net
Subject
Re: [cisco-voip] Disabling HTTP trace on CM 4.0






It's installed and activated by default in all recent versions of CM.

/Wes

candese.perez@gsa.gov wrote:

Anyone have experience using URLScan to disable HTTP trace in IIS 5 on a
Call Manager 4.0 server?



________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


candese.perez@gsa.gov

2006-07-13, 1:11 pm

I think you just have to add the TRACE verb under the DenyVerbs section of
the urlscan.ini file. Thanks for the additional information.







"Wes Sisk" <wsisk@cisco.com>
07/13/2006 10:16 AM

To
candese.perez@gsa.gov
cc
cisco-voip@puck.nether.net
Subject
Re: [cisco-voip] Disabling HTTP trace on CM 4.0






Candese,

A bit more information. OS 2000.4.3 adds additional security settings
covered in CSCsd62235. Basically set RemoveServerHeader=1 in urlscan.ini.
Is this what you are looking for? If not, please elaborate on what you
mean by 'disable http trace'?

/Wes

candese.perez@gsa.gov wrote:

Anyone have experience using URLScan to disable HTTP trace in IIS 5 on a
Call Manager 4.0 server?


________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com