No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Fat AP and Cloud AP V200R010C00 Command Reference

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
url-filter anti-bypass enable

url-filter anti-bypass enable

Function

The url-filter anti-bypass enable command enables the abnormal HTTP packet detection function.

The undo url-filter anti-bypass enable command disables the abnormal HTTP packet detection function.

Format

url-filter anti-bypass enable

undo url-filter anti-bypass enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, the abnormal HTTP packet detection function is disabled.

When the web server has the fault tolerance mechanism or the web server is not designed based on the RFC standard of HTTP, attackers may evade URL filtering. When an attacker tampers with an HTTP packet to make the URL information extracted by the Central AP different from URL filtering rules, the Central AP will permit the abnormal HTTP packet. After the abnormal HTTP packet reaches the web server, the server can identify the requested URL. Therefore, the attacker can access the URL.

After you enable the abnormal HTTP packet detection function, the Central AP can detect abnormal HTTP packets, preventing attackers from evading URL filtering.

Example

# Enable abnormal HTTP packet detection.

<Huawei> system-view
[Huawei] url-filter anti-bypass enable
Translation
Download
Updated: 2019-11-21

Document ID: EDOC1100064352

Views: 207357

Downloads: 122

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next