Tutorial: Specify Custom HTTP Headers
Abstract
Following this tutorial, you can provide the web server with additional HTTP headers.
Overview
You can provide additional HTTP headers for Access Server's web server. This may be helpful when security scanners test the web interface and require specific headers to be present. You can set multiple headers by specifying multiple configuration keys.
Caution
These custom HTTP headers are not checked for validity. They also are not meant to override headers that Access Server already implements.
An installed Access Server.
Console access and the ability to get root access.
Connect to the console and get root privileges.
Set two custom headers (adjust your command for your necessary headers — our example sets two of them):
sacli --key "cs.http_headers.0" --value "Custom Header: one" ConfigPut sacli --key "cs.http_headers.1" --value "Another Header: one two three" ConfigPut sacli start
Remove a custom header:
sacli --key "cs.http_headers.0" ConfigDel sacli start