A free download, the Web Application Configuration Analyzer scans IIS servers, hosted applications, and SQL Server instances for common security issues and misconfigurations.

General question:We recently switched one of our applications to Application Role security, which mandates (because the backend is SQL2000) that we turn off .NET Connection pooling for the sql ...

Although there has been a new IIS vulnerability disclosed in recent weeks, the attacks are only making use of poor site and database maintenance practices - using SQL injection to exploit sites.