OPTIONS Method enabled vulnerability detected on gateways WAN IP.

[Samsur121]

Anyone have any idea to close "OPTIONS Method enabled" VA on checkpoint firewall. Our VAPT team scans the firewall WAN IP and detected this "application supports the OPTIONS HTTP method due to web server misconfiguration."

[G_W_Albrecht]

Options is regarded safer as it is read only, different to post or put - and web servers today do operate on https only. So why this is a vulnerability, please give sources / references !

[Chris_Atkinson]

Encourage you to share further details via a support ticket for review.

See also: sk69160

[G_W_Albrecht]

See also sk104887: HTTP traffic with non-common HTTP methods does not pass through Security Gateway configure...

HTTP Methods in logs?

Query with HTTP(S) methods

[Samsur121]

Thank you all for the updates, It was false a positive.