Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Orion Platform > Implement generic error messaging in the Orion Web Console

Implement generic error messaging in the Orion Web Console

Table of contents

Updated September 14, 2017

Overview

The Orion Web Console provides informative messages when the website encounters an invalid URL with empty spaces. While useful on an internal level to your organization, these messages can be used by malicious individuals to investigate and fine-tune potential attacks against your organization. 

 

To stop providing informative messages, configure IIS to display generic messages instead.

Environment

All products running on Orion Platform, such as: 

  • NPM
  • SAM
  • NCM
  • NTA

Steps

Log on to your Orion server machine as an administrator.

  1. Install the URL Rewrite IIS extension from Microsoft (© 2013 Microsoft, available at https://www.iis.net/, obtained on September 14, 2017).
  2. Navigate to your SolarWinds Orion web folder, by default located at:
    C:\inetpub\SolarWinds
  3. Back up web.config.
  4. Add the following lines under the system.webServer section:
    <rewrite>
    <rules>
    <rule name="UrlWithWhitespaces">
    <match url="(\s+(\.aspx).*)|(\s+\/)" />
    <action type="Rewrite" url="//" />
    </rule>
    </rules>
    </rewrite>
  5. Save the file, and restart the website in IIS.

 

 

Last modified
10:31, 14 Sep 2017

Tags

Classifications

Public