This article discusses the special characters that are forbidden in encoded URLs in Microsoft Intelligent Application Gateway (IAG) 2007 and in Whale Communications IAG 3.6.
By default, the IAG filter forbids special characters that appear in encoded URLs. For example, the IAG filter forbids the following characters:
Note The special characters are listed in the Forbid Encoding of field in the Out-Of-The-Box Security Configuration section on the URL Inspection tab.
For security reasons, IAG forbids special characters in URLs. However, the lack of these characters may break an application that legitimately uses the encoded characters.
IAG lets you configure the Out-Of-The-Box Security Configuration settings based on an application type. For example, you can create a forbidden list for a Domain Web Access type. The forbidden list will not affect application types other than the Domain Web Access type.
If you want to enable spaces, clear the Forbidden characters include null check box in the Out-Of-The-Box Security Configuration section on the URL Inspection tab. After you make the changes, make sure that you enable the configuration by clicking Activate.