Configuration Parameters

Operational, Basic, and Advanced Parameters

Parameter

IP Phone UI

Options->Network Settings->HTTPS->

https block http post xml

 

HTTPS Server->XML

 

Aastra Web UI

Advanced Settings->Network->

HTTPS Server - Block XML

 

Advanced Network Settings

HTTP POSTs

Configuration Files

aastra.cfg, <mac>.cfg

(in Web UI)

 

 

 

 

Description

Enables or disables the blocking of XML scripts from HTTP POSTs.

 

Some client applications use HTTP POSTs to transfer XML scripts. The

 

phones’s HTTP server accepts these POSTs even if server redirection is

 

enabled, effectively bypassing the secure connection. When this

 

parameter is enabled (blocking is enabled), receiption of an HTTP POST

 

containing an XML parameter header results in the following response:

 

“403 Forbidden”. This forces the client to direct the POSTs to the HTTPS

 

server through use of the “https://” URL.

 

 

 

Format

Boolean

 

 

 

Default Value

0 (disables blocking of XML HTTP POSTs)

 

 

Range

0 (disables blocking of XML HTTP POSTs)

 

1 (enables blocking of XML HTTP POSTs)

 

 

Example

https block http post xml: 1

 

 

 

Appendix A

41-001160-00, Rev 01 Release 2.0

A-21

Page 363
Image 363
Aastra Telecom 57I C53I manual Https block http post xml