diff --git a/.htaccess b/.htaccess
index ae109fffa2..f943999d3b 100644
--- a/.htaccess
+++ b/.htaccess
@@ -20,5 +20,5 @@ DirectoryIndex index.php index.html
 
   RewriteRule .* - [E=HTTP_ESPO_CGI_AUTH:%{HTTP:Authorization}]
 
-  RewriteRule reset/?$ reset.html [QSA,L]
+  RewriteRule /?web\.config - [F]
 </IfModule>
\ No newline at end of file
diff --git a/api/v1/.htaccess b/api/v1/.htaccess
index c1d824da79..a9f4ca8fef 100644
--- a/api/v1/.htaccess
+++ b/api/v1/.htaccess
@@ -9,4 +9,6 @@ RewriteEngine On
 RewriteRule .* - [E=HTTP_ESPO_CGI_AUTH:%{HTTP:Authorization}]
 
 RewriteCond %{REQUEST_FILENAME} !-f
-RewriteRule ^ index.php [QSA,L]
\ No newline at end of file
+RewriteRule ^ index.php [QSA,L]
+
+RewriteRule /?web\.config - [F]
\ No newline at end of file
diff --git a/api/v1/portal-access/.htaccess b/api/v1/portal-access/.htaccess
index c1d824da79..a9f4ca8fef 100644
--- a/api/v1/portal-access/.htaccess
+++ b/api/v1/portal-access/.htaccess
@@ -9,4 +9,6 @@ RewriteEngine On
 RewriteRule .* - [E=HTTP_ESPO_CGI_AUTH:%{HTTP:Authorization}]
 
 RewriteCond %{REQUEST_FILENAME} !-f
-RewriteRule ^ index.php [QSA,L]
\ No newline at end of file
+RewriteRule ^ index.php [QSA,L]
+
+RewriteRule /?web\.config - [F]
\ No newline at end of file
diff --git a/web.config b/web.config
index ec35c9dfa8..4b1e1a0d9f 100644
--- a/web.config
+++ b/web.config
@@ -4,10 +4,6 @@
     <system.webServer>
         <rewrite>
             <rules>
-                <rule name="rule 1X" stopProcessing="true">
-                    <match url="^/?reset/?$"  />
-                    <action type="Rewrite" url="reset.html"  appendQueryString="true" />
-                </rule>
                 <rule name="RequestBlocking1" stopProcessing="true">
                     <match url="^/?data/config\.php$" />
                     <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />