topic Exception on specific HTTP HEADER in WAF

Exception on specific HTTP HEADER

nfrontin — Wed, 06 Dec 2023 09:02:35 GMT

Hi Checkmates,

We would like to know how to create an exception rule to disable inspection when a specific HTTP HEADER with a specific value is used.

We have tried with parameter name and parameter value, but we are not sure that is the right way to do it.

Any thoughts ?

Best Regards

Nicolas

Carlos_Diaz — Wed, 06 Dec 2023 19:18:41 GMT

Have you traied with something similar to the attached picture

nfrontin — Thu, 07 Dec 2023 10:56:12 GMT

Hi Carlos,

Thank you for your reply, that's exactly what we tried.

I have open a case.

Nicolas

yuvalmamka — Sun, 24 Dec 2023 14:58:42 GMT

Hi,

As for now, AppSec does not support creating exceptions based on HTTP header.

It is, though, on our roadmap and should be available early 2024.

Merry Christmas! 🎄