Check Point Advisories

Security Best Practice: Familiarize Yourself with the Non Compliant HTTP Protection

Check Point Reference:	SBP-2008-23
Date Published:	15 Aug 2008
Severity:	Critical
Last Updated:	Wednesday 17 March, 2010
Source:	IPS Research Center
Protection Provided by:
Who is Vulnerable?	Web Servers
Vulnerability Description	HTTP Protocol Inspection provides strict enforcement of the HTTP protocol, ensuring these sessions comply with RFC standards and common security practices.
Vulnerability Details	You can configure HTTP compliance enforcement on requests and responses: Enforce strict HTTP request parsing: Select this checkbox to block any request that does not comply with strict HTTP compliance. Enforce strict HTTP response parsing: Select this checkbox to block any request that does not comply with strict HTTP compliance.