Exception on specific HTTP HEADER

[nfrontin]

Hi Checkmates,

We would like to know how to create an exception rule to disable inspection when a specific HTTP HEADER with a specific value is used.

We have tried with parameter name and parameter value, but we are not sure that is the right way to do it.

Any thoughts ?

Best Regards

Nicolas

[Carlos_Diaz]

Have you traied with something similar to the attached picture

[nfrontin]

Hi Carlos,

Thank you for your reply, that's exactly what we tried.

I have open a case.

Nicolas

[yuvalmamka · Accepted solution]

Hi,

As for now, AppSec does not support creating exceptions based on HTTP header.

It is, though, on our roadmap and should be available early 2024.

Merry Christmas! 🎄