I am running IIS 7.5. I have configured Request Filtering to NOT allow unlisted verbs and have listed just a few verbs I want to allow. My question has to do with how denied requests are logged. When I review my log files I find many requests for the verb“COOK”, which is not allowed. The result code for the request is supposed to be 404, but I am seeing a mixture of 404 and 302. I cannot find any pattern as to why they are not always logged the same. Is this a known issue?
Thanks,
Dale