how does 'match req-response mismatch'

Terry Lee — Mon, 11 Mar 2019 22:10:10 GMT

Hi, Im studying HTTP MPF atm,

Im just wondering about the command/feature of HTTP MPF 'match req-reponse mismatch'

I have few question,

what is req-response mismatch ?

how does it work?? (as in specific packet flow,)

can you give me an example, or any specific case ???

thank you !!

mirober2 — Mon, 09 Jan 2012 13:48:46 GMT

Hi Terry,

The command reference shold have what you're looking for:

This command enables the following checks:

•Verifies that the value of the header content-type is in the internal list of supported content types,

•Verifies that the header content-type matches the actual content in the data or entity body portion of the message.

•Verifies the content type field in the HTTP response matches the accept field in the corresponding HTTP request message.

If the message fails any of the above checks, the ASA takes the configured action.

-Mike

topic how does 'match req-response mismatch' in Network Security