URLScan SRP 2.5 does not overwrite the value of MaxAllowedContentLength (332109)



The information in this article applies to:

  • Microsoft Internet Information Services

This article was previously published under Q332109

SYMPTOMS

After you upgrade from URLScan 2.5 to the more restrictive URLScan Security Rollup Package (SRP) 2.5, you find that the MaxAllowedContentLength that is specified in the Urlscan.ini file has not changed.

CAUSE

This problem occurs because when you install URLScan SRP 2.5 after you have installed URLScan 2.5, the MaxAllowedContentLength value of 2000000000 is not overwritten with the more restrictive value of 30000000.

RESOLUTION

To resolve this problem, set the MaxAllowedContentLength to 30000000. To do so, open the Urlscan.ini file in a text editor (such as Notepad), and then set the MaxAllowedContentLength value to 30000000. This file is located in the System Root\System32\Inetsrv\Urlscan folder.

REFERENCES

For additional information about URLScan, click the following article numbers to view the articles in the Microsoft Knowledge Base:

307608 Using URLScan on IIS

326444 How to configure the URLScan tool


Modification Type:MajorLast Reviewed:3/9/2005
Keywords:kbpending kbprb KB332109 kbAudDeveloper