Default request filtering settings for IIS 7.x on Notification Servers and Package Servers can prevent distribution of packages with certain types of content

Article:TECH174201  |  Created: 2011-11-11  |  Updated: 2014-07-21  |  Article URL
Article Type
Technical Solution



Symantec Management Platform requires the installation of the ASP services in IIS on the Notification Server in order to function effectively. Installing this feature in IIS 7.x automatically adds a number of default ‘Request Filters’.

When using Software Management solution, packages that contain folders or file extensions that are listed in the default request filters are prevented from downloading to package servers and clients.


The package server agent logs may contain warnings or errors similar to the following:

Description: GetFiles 'HTTP://Purgatory.mydomain.local/Altiris/PackageShare/pkggroup_m4wj6cduygxtwldzeszhubiikqbkmeir/English/32bit/Program%20Files/Symantec/Name/Version/Bin/AgentCore.dll'->'d:\Program Files\Altiris Agent\Package Delivery\51cfc5ac-a5e6-43a6-913d-1759afca3f7b\cache\32bit\Program Files\Symantec\Name\Version\Bin\AgentCore.dll' failed: HTTP error: 404 Not Found (-2147209951)


Notification Server 7.x, IIS 7.x

Package Servers installed on Windows 2008


 Open Administrative Tools | Internet Information Services (IIS) Manager

On Notification Servers navigate to:
<Server Name>\Sites\Default Web Site\Altiris\PackageShare
On Package Servers navigate to:
<Server Name>\Sites\Altiris\PS
Click Request Filtering (see below):
Check for directories that may be in your package files that are listed in hidden segments and remove them:
Check for file name extensions that are contained in the problematic package files and remove those filters.
Additional Information
If you have several servers and you have the need to automate this configuration you can use a script such as:
@echo off
pushd "%windir%\System32\inetsrv"
appcmd set config "Default Web Site/Altiris/PS" /section:system.webServer/security/requestFiltering /~fileExtensions /commit
appcmd set config "Default Web Site/Altiris/PS" /section:system.webServer/security/requestFiltering /~hiddenSegments /commit

Article URL

Terms of use for this information are found in Legal Notices