Dear team
I have a query from penetration test team where they mentioned dynamics crm meta data exposure to public , this could potentially leak useful info about the server to attacker
the metadata URL is
https:\\abc.com.sg\federationmetadata\2007-06\federationmetadata.xml
which got a rewrite rule inside iis rewrite the URL to
\handlers\federationmetadata.ashx
this I want to prevent by writing another rule but unable to
can you help me how to restrict federationmetadata access
Thanks
Lakshmi
