Thanks Rick,

Here is my situation. We are using a single sign on authentication called SiteMinder. This product 9 times out of ten passes the authentication via the header data. Once in awhile, I believe when the authentication expires or the cookie times out it must retrieve a new "cookie" from the authentication server. This is then passed via the query string. This is where I am having a problem. the URL is over 1000 characters long.

Now this only occurs with our IIS apps, we also have Tomcat running our jsp pages.....on there this happens and no error occurs. This is what leads me to believe that its an IIS restriction.

yes if I were passing the data I would obviously do a POST but its the authentication passing this data via the query string.