Technote (troubleshooting)
Problem(Abstract)
Attempts to perform a function in the IBM Security AppScan Enterprise web application results in error "Maximum request length exceeded ..."
Symptom
Performing one of the following functions in the AppScan Enterprise Console:
- importing users into AppScan Enterprise
- adding Jobs/Scans to the Report while creating a Report pack
- clicking PagesIn on a word document in a report
- importing job over 20 MB (in ASE version 5.6 and older)
results in error:
Maximum request length exceeded. A possible solution for this is to click 'Back' and wait for the entire page to load before continuing. If the problem persists, contact your system administrator.
Cause
In AppScan Enterprise, there are hard caps to the size of requests you can place by default. When an individual request exceeds this size, this message will appear.
Resolving the problem
The size/lenght can be changed in the web.config for AppScan Enterprise, by changing maxRequestLength for the particular page the error occurs. The web.config file is located in the <ASE product>\WebApp folder (by default C:\Program Files\IBM\Rational ASE\WebApp).
Open web.config in a text editor and make the change as directed below.
After the change in the web.config file and saving the file, you need to restart IIS (with iisreset).
- RESOLUTION for the error when "importing users into AppScan Enterprise"
Add the following text:
maxRequestLength="256000"
next to:
httpRuntime executionTimeout="9999"
for location path="Admin/UsersImport.aspx".
The corresponding part of web.config before the change:
<location path="Admin/UsersImport.aspx" allowOverride="true" inheritInChildApplications="true">
<system.web>
<!-- increase timeout on importing users as import could take awhile -->
<httpRuntime executionTimeout="9999" />
</system.web>
</location>
and after the change:
<location path="Admin/UsersImport.aspx" allowOverride="true" inheritInChildApplications="true">
<system.web>
<!-- increase timeout on importing users as import could take awhile -->
<httpRuntime executionTimeout="9999" maxRequestLength="256000" />
</system.web>
</location>
- RESOLUTION for the error when "adding Jobs/Scans to the Report while creating a Report pack"
The error message is resolved by adding the code below to the Web.config file:
<location path="Reports/AddJobsToReportPacks.aspx" allowOverride="true" inheritInChildApplications="true">
<system.web>
<!-- For the ContentJob What To Scan, 20 MB is the default max value, and the timeout is increased to allow long load times -->
<httpRuntime executionTimeout="999999" maxRequestLength="2048000"/>
</system.web>
</location>
- RESOLUTION for the error when "clicking PagesIn on a word document in a report"
To resolve the error, correct the following part of the web.config file from:
<location path="Reports/XReports.aspx" allowOverride="true" inheritInChildApplications="true">
<system.web>
<!-- increase timeout on an viewing a report to 10 minutes. This will help when viewing very large recordsets -->
<httpRuntime executionTimeout="600" />
</system.web>
</location>
to:
<location path="Reports/XReports.aspx" allowOverride="true" inheritInChildApplications="true">
<system.web>
<!-- For the ContentJob What To Scan, 20 MB is the default max value, and the timeout is increased to allow long load times -->
<httpRuntime executionTimeout="999999" maxRequestLength="2048000"/>
</system.web>
</location>
- RESOLUTION for the error when "importing job over 20 MB"
First, ensure that you ZIP the AppScan XML export files. ASE will take care of uncompressing it during the execution of the job. This should reduce the size of the file significantly
If the zip file is bigger than 20 MB in ASE version 5.6 (or 250 MB in versions 8.0 and later), follow these steps then do the following change in the web.config file:
For location path="Jobs/ImportJobImportWhatOptions.aspx"
change the value of "maxRequestLength" up to "2097151" (2GB, maximum allowed by ASP.NET).
Rate this page:
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.