Header Injection in Access Enforcement for Gatelet policy is not always adding the header
search cancel

Header Injection in Access Enforcement for Gatelet policy is not always adding the header

book

Article ID: 281693

calendar_today

Updated On:

Products

CASB Gateway Advanced

Issue/Introduction

Access Enforcement via Gatelet policy

This can happen in certain situations such as for API calls

Cause

The policy may not add the headers if there is no Activity set in the policy. 

Resolution

Under the Activities section in the policy in CloudSOC, set an activity. This will match the policy to the activity especially when the activity is started with an API call.