How to add custom HTTP Header to HTTP request or response

Products

• ProxySG Software - SGOS
• ISG Proxy
• Advanced Secure Gateway Software - ASG

Issue/Introduction

Custom HTTP Headers like "X-Content-Type-Options: nosniff"  has to be added to HTTP request or response.

Cause

In most scenarios custom HTTP Headers are providing additional layer of security.

Resolution

Custom HTTP Header can be added via VPM.

The below example provides the steps to configure HTTP Header "X-Content-Type-Options: nosniff" on HTTP Request forwarded to OCS:

1. In a Web Access Layer, create a new rule.
2. Set the required condition (source and/or destination) that will trigger Policy rule
3. Right-click the Action column in the new rule, click Set, New, Control Request Header. 
4. In the header name field type: "X-Content-Type-Options"
5. Set the value to "nosniff"
6. Click Ok.
7. Apply the Policy changes

 

Additional Information

• Enable the x-forwarded-for header in the VPM