Default request filtering settings for IIS 7.x on Notification Servers and Package Servers can prevent distribution of packages with certain types of content

Article:TECH174201  |  Created: 2011-11-11  |  Updated: 2012-06-08  |  Article URL http://www.symantec.com/docs/TECH174201
Article Type
Technical Solution

Product(s)

Subject

Languages

Problem



Symantec Management Platform requires the installation of the ASP services in IIS on the Notification Server in order to function effectively. Installing this feature in IIS 7.x automatically adds a number of default ‘Request Filters’.

When using Software Management solution, packages that contain folders or file extensions that are listed in the default request filters are prevented from downloading to package servers and clients.

Error



The package server agent logs may contain warnings or errors similar to the following:

Description: GetFiles 'HTTP://Purgatory.mydomain.local/Altiris/PackageShare/pkggroup_m4wj6cduygxtwldzeszhubiikqbkmeir/English/32bit/Program%20Files/Symantec/Name/Version/Bin/AgentCore.dll'->'d:\Program Files\Altiris Agent\Package Delivery\51cfc5ac-a5e6-43a6-913d-1759afca3f7b\cache\32bit\Program Files\Symantec\Name\Version\Bin\AgentCore.dll' failed: HTTP error: 404 Not Found (-2147209951)


Environment



Notification Server 7.1, 7.1 SP1 & SP2, IIS 7.x

Package Servers installed on Windows 2008

Solution



 Open Administrative Tools | Internet Information Services (IIS) Manager

On Notification Servers navigate to:
<Server Name>\Sites\Default Web Site\Altiris\PackageShare
 
On Package Servers navigate to:
<Server Name>\Sites\Altiris\PS
 
Click Request Filtering (see below):
 
 
Check for directories that may be in your package files that are listed in hidden segments and remove them:
 
 
Check for file name extensions that are contained in the problematic package files and remove those filters.
 
 
 
Additional Information
If you have several servers and you have the need to automate this configuration you can use a script such as:
 
@echo off
 
pushd "%windir%\System32\inetsrv"
appcmd set config "Default Web Site/Altiris/PS" /section:system.webServer/security/requestFiltering /~fileExtensions /commit
appcmd set config "Default Web Site/Altiris/PS" /section:system.webServer/security/requestFiltering /~hiddenSegments /commit
popd
 


Article URL http://www.symantec.com/docs/TECH174201


Terms of use for this information are found in Legal Notices

Please Sign In

Login using SymAccount.

Knowledge Base Search

Knowledge Base Search

Rate this Article

Help us improve your support experience.

MySymantec

MySymantec

Contacting Support

Contacting Support