How to add custom HTTP Header to HTTP request or response
search cancel

How to add custom HTTP Header to HTTP request or response

book

Article ID: 251523

calendar_today

Updated On:

Products

ProxySG Software - SGOS ISG Proxy Advanced Secure Gateway Software - ASG

Issue/Introduction

Custom HTTP Headers like "X-Content-Type-Options: nosniff"  has to be added to HTTP request or response.

Cause

In most scenarios custom HTTP Headers are providing additional layer of security.

Resolution

Custom HTTP Header can be added via VPM.

The below example provides the steps to configure HTTP Header "X-Content-Type-Options: nosniff" on HTTP Request forwarded to OCS:

  1. In a Web Access Layer, create a new rule.
  2. Set the required condition (source and/or destination) that will trigger Policy rule
  3. Right-click the Action column in the new rule, click SetNewControl Request Header
  4. In the header name field type: "X-Content-Type-Options"
  5. Set the value to "nosniff"
  6. Click Ok.
  7. Apply the Policy changes

 

Additional Information