topic Re: Blocking POST Method in firewall in General Topics

Blocking POST Method in firewall

JPR — Wed, 21 Jun 2023 13:58:35 GMT

Hi all,

I'd like to block use of the POST method except for some specific URLs/IPs. Is it possible to create a firewall rule to achieve this?

The firewall is version R81.

Thanks.

Edit: Just to specify: I want to block the POST method being used in connection with multipart/form-data.

Re: Blocking POST Method in firewall

PhoneBoy — Wed, 21 Jun 2023 20:41:13 GMT

I see two possible options here:

Application Control Signature Tool: https://support.checkpoint.com/results/sk/sk103051
Content Awareness (something like "All Files" in content)

Re: Blocking POST Method in firewall

JPR — Mon, 26 Jun 2023 14:34:39 GMT

Thanks for the reply.

I will look into your suggestions.

So, the setting HTTP Methods under Manage and Settings>Blades>Inspection Settings has nothing to do with what I wish to achieve?

Thanks.

Re: Blocking POST Method in firewall

PhoneBoy — Mon, 26 Jun 2023 15:41:44 GMT

As far as I know, none of those settings will achieve what you’re after.
Also you will need HTTPS Inspection to even see an HTTP POST request, regardless of method used.