COMODO WAF: HTTP header is restricted by policy

[TDmitry]

@markb1439 post:20

Hi,

We are on rules version 1.70 and we still have users having this issue (mostly on AT&T). Any ideas (other than turning off the rule)?

Thanks,

Mark

Which exactly issue do you have? Please attach audit or debug log or PM it to me.

[markb1439]

Many, many 403s with the same characteristics:

Request:
GET /<>/
Action Description:
Access denied with code 403 (phase 2).
Justification:
Matched phrase “/via/” at TX:header_name.

All users reporting this are on AT&T.

[TDmitry]

@markb1439 post:22

Many, many 403s with the same characteristics:

Request:
GET /<>/
Action Description:
Access denied with code 403 (phase 2).
Justification:
Matched phrase “/via/” at TX:header_name.

All users reporting this are on AT&T.

Exclude /via/ from userdata_bl_headers or just download fresh rules if you are using standalone CWAF.