By default, UrlScan denies access to any URLs which include a dot in the path, so any user uploaded content in these paths is inaccessible.

To resolve this issue, take the following steps

  1. Open urlscan.ini.

  2. Find the line that reads: 
    AllowDotInPath=0
  3. Change this to: 
    AllowDotInPath=1

  4. Save and close the file.

  5. If you're using versions prior to IIS7, you must restart IIS for the change to take effect.