Symantec Access Management

  • 1.  Preserve HOST Header Issue

    Posted Sep 25, 2014 09:35 PM

    I am Using Secure proxy Server-12.52 for federation as well as the SSO to the other applications. Now in the SPS i have created a new virtual host.

     

    when i use this new virtual host for protecting applications, well it's protecting fine but it's sending the IP Address as a HOST Header instead of virtual host name to the end web server(IIS-7).

     

    In the proxy rule, i have mentioned as below

     

    <nete:proxyrules xmlns:nete="http://originalhost.host.com/" debug="no">

    <nete:cond type="host" criteria="contains">

    <nete:case value="virtualhost.test.com"><nete:cond type="uri" criteria="beginswith">

    <nete:case value="/test"><nete:forward>http://xx:xx:xx:xx:4324$0</nete:forward>

    </nete:case>

    ...

    ...

    </nete:proxyrules>

    Expected output should be : SPS should send  "virtualhost.test.com" as a HOST HEADER. but it's sending IPAddress.



  • 2.  Re: Preserve HOST Header Issue
    Best Answer

    Posted Sep 28, 2014 08:49 PM

    Hi Venga,

     

    The HOST header is controlled in SPS by mainly two parameters :

     

    -enableproxypreservehost

    -filteroverridepreservehost

     

    Have you configured these parameters properly?

     

    Here is some details on what these parameter are and how to configure them :

     

    ########################################################################

    Preserve the HOST Header File

    You can preserve the HTTP HOST header file and send it to the backend

    server by using

    the enableproxypreservehost parameter. To use the enableproxypreservehost

    parameter, perform the following steps:

    1. Open the server.conf file.

    2. Add the following parameter in the Virtual Host section of the virtual

    host you want

    to configure:

    enableproxypreservehost

    3. Set the value of enableproxypreservehost to yes.

    When you enable enableproxypreservehost, the parameter takes precedence

    over a filter that is configured to control the HTTP HOST header. To disable

    enableproxypreservehost and let the filter take precedence over the

    parameter,

    perform the following steps:

    1. Open the server.conf file.

    2. Add the following parameter in the Virtual Host section of the virtual

    host you want

    to configure:

    filteroverridepreservehost

    3. Set the value of filteroverridepreservehost to yes.

    You can enable filteroverridepreservehost only if a filter is available to

    control the HTTP

    HOST header.

    ####################################################################

     

    Hope this helps.

     

    Cheers,

    Ujwol