Developer Tools

    Microsoft Web Application Configuration Analyzer v2.0

    Language:
    English
    Web Application Configuration Analyzer (WACA) analyzes server configuration for security best practices related to General Windows, IIS , ASP.NET and SQL Server settings.
    • Version:

      2.0

      File Name:

      WACAV20.msi

      Date Published:

      5/16/2011

      File Size:

      4.3 MB

        Web Application Configuration Analyzer (WACA) is a tool that scans a server against a set of best practices recommended for pre-production and production servers. The list of best practices is derived from the Microsoft Information Security & Risk Management Deployment Review Standards used internally at Microsoft to harden production and pre-production environments for line of business applications. The Deployment Review standards themselves were derived from content released by Microsoft Patterns & Practices, in particular: Improving Web Application Security: Threats and Countermeasures available at: http://msdn.microsoft.com/en-us/library/ms994921.aspx. It uses an agent-less scan that requires the user to have admin privileges on the target server, as well as any SQL Server instances running on that machine. It can be used by developers to ensure that their codebase works within a secure / hardened environment (although many of the checks are not as applicable for developers).

        This release of WACA we included some new features. They include:
        • Suppressions – you can now suppress any rule you feel is not appropriate for your scan.
        • Saving of suppression files – once you set up a suppression list you want to use you can save it off for future uses.
        • You can change the suppressions and regenerate the report without needing to re-run the scan.
        • Reporting – Updated the reporting section to include suppression information so you know what passed, failed, was not applicable and what was suppressed.
        • Multiple reports – you can view multiple scans of the same machine or view a single machine’s scan and compare it to other machines.
        • Export to the Microsoft RED format.
        • Scan multiple systems and SQL instances in one bulk scan.
        • Additional rules – we’ve added in additional SQL rules.
        • And of course bug fixes that were missed in the last release.
    • Supported Operating System

      Windows 7, Windows Server 2003, Windows Server 2003 R2 (32-Bit x86), Windows Server 2003 R2 x64 editions, Windows Server 2008

        Supported Operating Systems for installation: Windows XP, Windows Vista, Windows Server 2003, Windows Server 2008 R1/R2

        Support Operating Systems for scanning: Windows Server 2003, Windows Server 2008 R1/R2

        Sofware Requireemnts: .NET Framework v4.0, Microsoft Office Excel (Optional)
        1. Click the Download link to start the download.
        2. Do one of the following:
          • To start the installation immediately, click Open or Run this program from its current location.
          • To copy the download to your computer for installation at a later time, click Save or Save this program to disk.

    Popular downloads

      • 01

        Microsoft .NET Framework 4 (Web Installer)

        The Microsoft .NET Framework 4 web installer package downloads and installs the .NET Framework components required to run on the target machine architecture and OS. An Internet connection is required during the installation. .NET Framework 4 is required to run and develop applications to target the .NET Framework 4.

      • 04

        Microsoft .NET Framework 3.5 Service Pack 1

        Microsoft .NET Framework 3.5 Service Pack 1 is a full cumulative update that contains many new features building incrementally upon .NET Framework 2.0, 3.0, 3.5, and includes cumulative servicing updates to the .NET Framework 2.0 and .NET Framework 3.0 subcomponents.

    Loading your results, please wait...

    Free PC updates

    • Security patches
    • Software updates
    • Service packs
    • Hardware drivers

    Microsoft suggests

       Try Visual Studio 2013 for free.
    Now available: Visual Studio 2013
    Connect ideas. Create amazing apps.
    Free trial