Hi,
Pardon me if I am posting to the wrong section of the forum, but I am facing an issue with getting UrlScan and IIS settings to work properly.
I have configured UrlScan to "UseAllowVerbs=1" and the verbs that are allowed is as followed:
- Get
- Head
- Post
- Put
- Options
Then whenever I setup RequestFiltering in IIS, the website fails to load.
- Does UrlScan takes precedent in this case or?
- Is configuration done on the UrlScan adequate and will pass the penetration test even though configuring of the Verbs on IIS is avoided?
Cheers.