Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Figure 73: Web/Secure
Web: HTTP Reply tab
Chapter 6: Configuring Application Defenses
Creating Web or Secure Web Application Defenses
• None—Select this option if you want to deselect all HTTP request
header filter types in the list. (You can also deselect all of the types by
clicking Deselect All.)
• Standard—Select this option if you want to automatically select all of the
header types contained in the list. (You can also select all header types
by clicking Select All.)
• Paranoid—Select this option if you want to exclude all options not
defined in the RFC.
• Custom—Select this option if you want to manually configure which
HTTP header types you will allow or deny.
2 In the Filter Option field, determine whether you want to allow or deny the
header types you select, as follows:
• Allow—Select this option to allow all header types that are selected in
the HTTP Request Header Filter Types window. All other types will be
denied.
• Deny—Select this option to deny all header types that are selected
selected in the HTTP Request Header Filter Types window. All other
types will be allowed.
3 In the Denied Header Action area, select one of the following options:
• Block Entire Page—Select this option to block the entire page when an
HTTP header is denied.
• Allow Page Through Without Denied Headers—Select this option to
mask the denied HTTP header, but still allow the page to be viewed. (A
denied HTTP header will be overwritten with X’s.)
Configuring the Web/Secure Web HTTP Reply tab
To configure HTTP Reply properties for a Web/Secure Web defense, click the
HTTP Reply tab. The following window appears.
163