Irules For hide allow http method options in F5

Question

hi everyoneMy customers have difficulties where their application is subject to a pentest where in the HTTP Request and Response it displays the HTTP method as shown below, is there any hidden rules that can be used to hide or remove HTTP Methods such as OPTIONS, POST and others marked below ThisThank You&nbsp;&nbsp;Thank You

mihaic · Answer

here is an article on OPTIONS method. You can use the HTTP profile to reject or irules:
https://my.f5.com/manage/s/article/K34769490
you can do the same for other methods.
&nbsp;
&nbsp;

Forum Discussion

Irules For hide allow http method options in F5

1 Reply

Recent Discussions

ASM - Parent policy vs OWASPcompliance

Rewrite uri translation not working

CONNECTION IS LOST DUE TO SELF IP IS DELIVERED

APM OCSP Responder Issues

no available managed rule groups for Israel il-central-1

Related Content

LTM Policy Options Clarification

Service Discovery and authentication options for Kubernetes providers (EKS, AKS, GCP)

Load balancing method specific decision

HTTP method conversion

Enforce RFC Compliance option in http profile