Currently, I’m facing the following problem with IIS 10: when adding a new site in IIS 10, it shows the following error: 0x800710D8. All 100 sites are defined in the applicationHost.config file. When I remove one of the sites and then add a new one, the operation runs without error. However, when attempting to add another one, it shows the same error.

To prevent path traversal attack, I add some settings in request filtering (in Rule and URL tabs) but they does not work properly.
For example I add “..” in “Deny String” and in “Deny Sequence” but IIS accept it (e.g. ../../css/test.txt).
Also I add “/../.*” in “Block Request Rule” in URL rewrite, but it does not work too.