HTTP Method Blocking — Block Requests Based on Their HTTP Methods

You can configure that any requests for web access are blocked if they use particular HTTP methods, for example, PUT or GET.

1. On the user interface for Secure Web Gateway, select Policy > Web Policy > Policy.

2. On the policy tree in the navigation panel, expand Common Rules and select HTTP Method Blocking.
   
   The selected rule set appears in the configuration area on the right. 

3. Configure when this rule set should apply.

   • Under Criteria, leave the default All traffic, as you want the rules in this rule set to apply to all types of traffic.

   • Next to Applies to, leave the default Request, as you want the rules in this rule set to be processed in the request cycle of the filtering process process on Secure Web Gateway.
     
     

4. Configure the rules for blocking requests based on their use of HTTP methods. They are shown under Preset Rules.
   
   There is a rule for each method. To enable or disable a rule, use the checkbox at the beginning of the line with the rule.
   
   

To enable or disable the complete rule set, use the toggle buttons at the end of the line with the rule set name.

You have now configured that requests for web access are blocked if they use particular HTTP methods.