Disable HTTP Options Method on Management Interface F5

Dear all,

Our customer just ran a pentest on F5 Mgmt IP and found vulnerability HTTP Options Method enable. I only know how to disable this on VIP IP using HTTP profile/irule but couldnt find a way to disable this on Mgmt interface. Could anyone let me know how can I accomplish this. Many thanks!