Disabling Metadata Publishing in ASMX Web Services

ASMX web services have metadata publishing enabled, which allows WSDL and DISCO metatdata to be retrieved. In order to protect web services from attackers, turn off the documentation protocol in ASMX web services on Archer production servers.

Disable ASMX metadata publishing

Configure the Archer web.config file to remove the documentation protocol publishing on ASMX web services.

  1. In the web.config file, locate <system.web>.
  2. In the child expression <webServices>, add the following:

    3. <protocols>

    <remove name="Documentation"/>

    </protocols>

  3. Click Save.
  4. Perform an IIS reset.