By default, IIS handlers defined in customers' web.config files override those defined on the web server level. You can prohibit customers from overriding the handlers via the web.config files. Go to Tools & Settings > Security Policy and select Prohibit the ability to override handlers via web.config.
Please note the following: