WebApp settings

The WebApp (web interface for the requester) settings are stored in the appsettings.json file. The file is in JSON format and is located at C:\inetpub\wwwroot\Alvao by default. You can use Notepad from Windows to edit it.

Basic settings

In the appsettings.json file, each configuration variable is written as an "key": <value> pair. The key specifies the name of the variable. In the following table you will find a list of variables with their value descriptions.

Variable	Value
AppName	Name of the web application, e.g. "ALVAO Service Desk ". This value is displayed in the header of each page.
Kb	If a value of false is specified, the web application will not display the knowledge base. A value of true will enable its display.
CustomThemePath	Path to the folder with the files for customizing the look.

Setting automatic logout when the user is inactive

A user will be automatically logged out after a specified period of time if they have not taken any action during that time.

You can set the automatic logout duration by changing the value of the WebApp.AutoLogoutMinutes in the Administration - Settings - Advanced. Enter the time in minutes within the range of 1 to 525,600 (one year).

You can disable the automatic logout by entering 0 value.

For proper functionality it is also necessary to check the settings of the web.config file: in the section <system.web> <authentication> <forms> the slidingExpiration parameter. This parameter must not be filled in or must be set to true.

warning

This setting only works for form logins.

Setting prohibited attachment types

To set prohibited attachment change the value of the WebApp.AttachmentBlacklist in the Administration - Settings - Advanced: 'bat, cmd, exe&'

After applying this setting, attachments with bat, cmd and exe extensions will be disabled.

To restore the default state, just delete the setting.

Setting allowed attachment types

To set allowed attachment change the value of the WebApp.AttachmentWhitelist in the Administration - Settings - Advanced: 'bat, cmd, exe'

After applying this setting, attachments with bat, cmd and exe extensions will be allowed.

To restore the default state, just delete the setting.

note

The whitelist types takes precedence over the blacklist. If the same extension is set in both lists, the system considers it allowed.

Setting the maximum attachment size

The maximum attachment size is defined in the <configuration><system.web><httpRuntime> section in the "maxRequestLength" variable in kilobytes [KB].

In case of using IIS7 and higher, you need to modify the maximum attachment size also in the <configuration><system.webServer><security>&lt ticket[^esi]iltering>&lt ticket[^esi]imits> in the "maxAllowedContentLength" variable in bytes [B].

If you are using the Alvao for Outlook add-on, it is necessary to also modify the configuration file web.config for the AlvaoRestApi application at this default IIS path: C:\inetpub\wwwroot\AlvaoRestApi\web.config, where you need to adjust the value of the parameter: maxRequestLength (in kilobytes KB).

note

The specified parameter values represent the maximum size of the entire email, not just the attachment itself. If you intend to process attachments of sizes e.g. 14MB, the total message size (including attachments, text, and overhead) might reach up to 20MB.

Enhancing protection against password guessing attacks

We recommend improving protection against password guessing attacks by enabling reCAPTCHA.