Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Figure 6-5. Web/Secure
Web: HTTP Reply tab
Creating Web or Secure Web Application Defenses
Standard—Select this option if you want to automatically select all
of the header types contained in the list. (You can also select all
header types by clicking Select All.)
Paranoid—Select this option if you want to exclude all options not
defined in the RFC.
Custom—Select this option if you want to manually configure
which HTTP header types you will allow or deny.
2. In the Filter Option field, determine whether you want to allow or deny
the header types you select, as follows:
Allow—Select this option to allow all header types that are
selected in the HTTP Request Header Filter Types window. All other
types will be denied.
Deny—Select this option to deny all header types that are selected
selected in the HTTP Request Header Filter Types window. All other
types will be allowed.
3. In the Denied Header Action area, select one of the following options:
Block Entire Page—Select this option to block the entire page
when an HTTP header is denied.
Allow Page Through Without Denied Headers—Select this option
to mask the denied HTTP header, but still allow the page to be
viewed. (A denied HTTP header will be overwritten with X’s.)
Configuring Web/Secure Web HTTP Reply tab
To configure HTTP Reply properties for a Web/Secure Web defense,
click the HTTP Reply tab. The following window appears.
Configuring Application Defenses 6-11