This is a security feature. Do not change this feature unless the scope of the change is fully understood. If the file extension ...

This is a security feature. Do not change this feature unless the scope of the change is fully understood. If the file extension for the request should be allowed, remove the denied file extension from configuration/system.webServer/security/requestFiltering/fileExtensions.