Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Creating Web or Secure Web Application Defenses
Figure 6-4. Web/Secure
Web: HTTP Request tab
About the HTTP Request
tab
6-10 Configuring Application Defenses
2. In the Match Parameter area, select the portion of the URL that will be
filtered:
Host—Select this option to filter on the URL host
(http://hostname/path).
Path—Select this option to filter on the URL path
(http://hostname/path).
All—Select this option to filter on the entire request
(http://hostname/path).
Configuring the Web/Secure Web HTTP Request tab
To configure HTTP Request properties for a Web/Secure Web defense,
click the HTTP Request tab. The following window appears.
The HTTP Request tab allows you to configure header filtering for
HTTP requests. This tab is only available if you selected Server or
Combined in the Type field. Follow the steps below.
Note: The fields in this tab will be disabled unless you select the HTTP Request check box
on the Enforcements tab.
1. Select the type of HTTP header filtering you want to allow or deny in the
Selected HTTP Request Header Filter Types area. The following options
are available:
Note: The X-* filter type is a wildcard filter that will allow or deny all X-xxx request
headers (commonly found in user-defined headers). If you create an Allow list and do
not include the X-* filter type, most Web traffic will be denied.
None—Select this option if you want to deselect all HTTP request
header filter types in the list. (You can also deselect all of the types
by clicking Deselect All.)