Prevent directory traversal
Make sure that the short file name does is not allowed on the server. You ca do do by edit This is achieved by editing the registry.
Search regedit in windows server
...
Go to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystemFind key NtfsDisable8dot3NameCreation
...
Double click to set the value to 1
...
This will prohibit hacker hackers to do directory traversal with short file name.Then take the following steps,
Set IIS URL filtering
Set up IIS to filter URLs on forbidden characters.
Open IIS- Double click request filtering.
...
Add deny sequence (eg.
...
tilde, backslash etc) for the url
...
...
IIS error pages not to display error information
Go to the error pages - double click
...
For the error code click edit feature code and then check custom error pages instead of detail error page and select the custom error page location.
...