Skip to main content
aaronsfc
aaronsfc
Participant
May 16, 2014
Question

We are having some issues with the Server Lockdown guide for Coldfusion 9. It seems to break at the applicationhost.config file when we enter the deny sequences to restrict access to the Coldfusion folder paths.

  • May 16, 2014
  • 1 reply
  • 282 views

In the block/CFIDE requests section of the Server Lockdown guide for Coldfusion 9, when we edit the applicationHost.config file to block Coldfusion URL sequences, Coldfusion brings up an error HTTP Error 500.19 internal server error.  A web.config file was also created and placed in the web root of the Coldfusion install.  How can we fix this?

Thanks in advance

This topic has been closed for replies.

1 reply

Anit_Kumar
Community Manager
Anit_KumarCommunity Manager
Community Manager
May 17, 2014

After making changes to applicationHost.config, remove the web.config (after taking a backup) and restart IIS.

This should fix the issue.

Regards,

Anit Kumar

aaronsfc
aaronsfcAuthor
Participant
May 19, 2014

This worked!  But why did I have to remove the web.config file when the instructions say to include the file in the wwwroot?

Anit_Kumar
Community Manager
Anit_KumarCommunity Manager
Community Manager
May 20, 2014

Wow. That is great. Your web.config certainly had something, which was breaking ColdFusion. Secondly, whenever you make changes to applicationHost.config, an IIS restart is required as well.

This fixed the issue.

Regards,

Anit Kumar

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices