topic Re: Blocking traffic based on HTTP Request Header in Firewall and Security Management

Blocking traffic based on HTTP Request Header

yanirclsr — Wed, 27 Sep 2023 18:15:14 GMT

We are trying to block access to specific URLs except cases where the request includes some specific HTTP Request header.

Example a: Allow the request if User-Agent includes *ABC*

Example b: Allow the request if Content-Type includes *application/json*

Example c: Allow the request if Some-Custom-Header equals 123123

How this can be achieved?

Re: Blocking traffic based on HTTP Request Header

PhoneBoy — Thu, 28 Sep 2023 19:43:51 GMT

https://support.checkpoint.com/results/sk/sk103051

Re: Blocking traffic based on HTTP Request Header

yanirclsr — Mon, 02 Oct 2023 18:37:42 GMT

Thanks @PhoneBoy . This looks like the right solution.

Did you manage to actually make it work?

When trying to export the custom signature - the tool crashes, and I get the error message:

An error has occurred and ACST was not able to complete the operation.

Any idea how to fix this?

Re: Blocking traffic based on HTTP Request Header

PhoneBoy — Tue, 03 Oct 2023 14:37:04 GMT

This would need to be addressed via TAC: https://help.checkpoint.com.

Re: Blocking traffic based on HTTP Request Header

yanivatia — Thu, 12 Oct 2023 07:40:28 GMT

Hi I have succeed without any error on the ACST app side.

I tryed the cnn sports from the support sk and change it to my specific header and when I import the xml to the smart console I get failed. can you help with the header itself?

Thanks

Re: Blocking traffic based on HTTP Request Header

PhoneBoy — Thu, 12 Oct 2023 15:53:33 GMT

Again, please consult with the TAC.