<system.webServer> <security> <requestFiltering> <verbs> <add verb="TRACE" allowed="false" /> <add verb="TRACK" allowed="false" /> <add verb="PUT" allowed="false" /> <add verb="DELETE" allowed="false" /> <add verb="OPTIONS" allowed="false" /> </verbs> </requestFiltering> </security> </system.webServer>