Forum Discussion

Koalan's avatar
Koalan
Icon for Cirrus rankCirrus
Jan 16, 2020

Disable HTTP OPTIONS method and Disable TCP Timestamp responses

Hi,   So we run a penetration testing and we found 2 of our VIPs affected by these:   a. Disable HTTP OPTIONS method b. Disable TCP Timestamp responses   Is there a way to remediate this...
application delivery
iRules
LTM
operations
iaine's avatar
iaine
Icon for Nacreous rankNacreous
Jan 16, 2020

Hi

 

You can disable HTTP OPTIONS in the HTTP profile in the known methods section. If you want to only disable it for a single VIP then create a new HTTP profile, make the required change and then associate it to your VIP

 

For TCP Timestamps. Again, if you want to disable, this is in the TCP Profile in the Congestion Control section. Create a new TCP profile, make your change and then associate it to your VIP