How to Mask IIS

The web servers are masked to enhance the security and to deal with the vulnerabilities and other known threats.  Masking involves removing the identifiable details that Trojan horses can use to detect and attack your operating and the web server.  

It also involves modifies and removes the unnecessary response data and provides control over the server header data via HTTTP response.  To prevent the server’s header information from being hacked you can implement URLScan utility. URLScan can be installed with the IIS lockdown tool.  You can download the URLScan utility from the following URL.
http://www.microsoft.com/downloads/details.aspx?FamilyID=12244f33-a5da3-By default theURLScan tool will be installed in the following in the following directory. %systemroot%\System32\Inetsrv\UrlScan directory.
The vulnerabilities in the web server can be found by running the vulnerability assessment test.

It produces the possible exploits to the target system.  The following techniques are required to assess the vulnerabilities and protect Internet Information Server from threats.