"Unlisted File Extensions are not allowed" option in IIS 8.5 is filtering all servlet calls to WebSphere RRS feed

  • Question

  • We are running IIS 8.5.9600.16384 with Windows 2012 R2, with IIS routing Java server application calls to WebSphere Application Server 8.5. In IIS, we have configured a web server instance, where it serves static files from the disk, at the same time the IIS-WAS connector ensures URLs that call the Java server are routed properly. This configuration is running correctly with no issues.

    As part of our security hardening process we need to enable the "Unlisted File Extensions are not allowed" option, however it ends up blocking URLs that should be routed to our WAS server. We added a white list of allowed extensions  (htm, html, js, xml, etc)., along with a period (".") - which was recommended on the internet. The files from the static site are being served properly, but IIS is still blocking all the Java servlet application calls.

    Is it possible to enable this option for this configuration? Or is IIS truly unable to route extensionless-URLs to WAS?

    Thursday, May 2, 2019 6:28 AM