One of my collegues just posted this info: http://blogs.msdn.com/usisvde/archi...ls-help-isvs-protect-against-web-attacks.aspx Worth checking into.