File Extensions required by ITMS with respect to IIS

Products

• IT Management Suite

Issue/Introduction

Are file extensions such as “.php”, “.js”, “.css”, and “.html” required for both the Symantec Management Platform and Site Server in IIS? How about "Request Filtering"?

Environment

ITMS 8.x

Resolution

The IIS extensions currently implemented during a default installation of our product are required in order for the Symantec Management Platform to run. This is based on the application and all of the solution characteristics provided. If these are deviated from the Broadcom cannot guarantee results or that the solution will install or function correctly.

As Vendor, the recommendation is to accept the file extensions as listed to ensure compatibility with our application.

In regards to "Request Filtering":

• maxQueryString with a value of “2048”

• Verb requiring GET, POST, and HEAD.

For certain cases, it is recommended increasing the "MaxQueryString".

For verb filtering, most of the methods at the Altiris virtual directory level are intentionally denied. For certain services (like Deployment Solution) it is required that additional verbs for WebDav. POST and GET are used widely across lots of the pages for general navigation and management of settings. HEAD is used at least to report Agent Health.  Additional verbs for WebDav mentioned below are used to manage DS image upload to the web server.