Thread: WebKnight

This open source Web application firewall is meant for the lIS web server. It is basically an ISAPI filter, which secures web applications by blocking certain requests. It scans a!l incoming requests and validates them based on filter rules. By default, itcomes with security filters for SQL injection, Buffer overflow, directory traversal, etc. Configuring WebKnight is simple; it asks for features you would like to enable, such as late scanning, scan secure, non-secure ports, etc. Similarly, while doing incident handling. it allows users to configure if the firewall should immediately respond to the client with its default message or redirect the user to another URL. It also allows users to configure request limits, authentication, robots, headers, cookies, etc.