Has anyone installed and used Microsoft’s URLScan Security Tool? It’s billed as an IIS filter that pre-scans all incoming URL requests for potential security compromises (e.g., characters that don’t belong requested address, and that sort of thing), but I wonder if it works, and what kind of impact it has on the web server. If you’ve used it, I’d appreciate it if you’d let me know what your experience has been.