EV URL inaccessible after IIS changes

[EVUser0704]

Hello guys,

We've recently changed the setting "Allow unlisted file name extensions" under "Request Filtering Settings" in IIS, and since then the Enterprise Vault webpage cannot be accessed.

We don't want to allow the unlisted files hence we don't want to remove this setting. We've already tried adding '.' in allow files. Not sure what else we could try.

Any help will be much appreciated!

Regards,

EVUser

[VirgilDobos]

Hi there,

Can you advise what is the reason for making this change in the IIS?

[EVUser0704]

Hi Virgil,

Our end customer wanted to change this setting as advised by their network security team. And now we can't open http://localhost/enterprisevault/ URL. Customer is adamant on not reverting the setting and wants us to find a work-around. We did try putting a '.' in exceptions but that hasn't seemed to help.

[VirgilDobos · Accepted solution]

Hi mate,

This IIS change is not supported by EV.

If the customer wants to make the EV environment more secure, there are other things to be considered, including enabling HTTPS, using RBA, etc. Have a look on below articles:

https://vox.veritas.com/t5/Archiving-and-eDiscovery/Making-Enterprise-Vault-More-Secure/ba-p/780389

https://vox.veritas.com/t5/Articles/How-to-secure-Enterprise-Vault/ta-p/813833

[EVUser0704]

Thanks Virgil. That makes sense. Just for the record, is it documented anywhere that EV does not support such IIS tweaks?

[VirgilDobos]

Nope, it is not documented as far as I know. If you want an official confirmation, you can log a case and ask Veritas support to confirm that for you. Then, you can show that to the customer.