-2

I tried to install ModSecurity for IIS 10 and use it for my asp.net websites, the problem is when I want to add the <ModSecurity...> element at the level of the <web.server>....</web.server> element it displays an error with this message:

The <web.server> element has an invalid child element

  • Please read https://stackoverflow.com/help/how-to-ask and create a [MVCE](https://stackoverflow.com/help/mcve) in your question so that it can be easily reproduced – Avery Apr 11 '19 at 10:42
  • Clearly the extension has documentation, https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual-%28v2.x%29#installation-for-microsoft-iis – Lex Li Apr 11 '19 at 13:22

1 Answers1

0

Try using <system.webServer> instead of <web.Server>. The former is not part of IIS configuration.

Lex Li
  • 60,503
  • 9
  • 116
  • 147
Rich-Lang
  • 469
  • 2
  • 7
  • Yes [Lex](https://stackoverflow.com/users/11182/lex-li) i just make a mistake when I wrote my message but i m using the former ****. so can you help me with this. – Essabar Ismail Apr 12 '19 at 07:24
  • @EssabarIsmail Want to try adding some of your Web.config and more of the error message? – Rich-Lang Apr 12 '19 at 11:36