URLScan is an ISAPI filter that allows Web site administrators to restrict the kind of HTTP requests that the server will process. By blocking specific HTTP requests , the URLScan filter prevents potentially harmful requests from reaching the server and causing damage.